California manufacturers face a unique threat landscape — ransomware targeting production lines, CMMC 2.0 compliance for defense supply chains, and the convergence of OT and IT systems that were never designed to talk to each other.
Source: CISA, FBI IC3, Verizon DBIR, industry reports.
Modern manufacturing environments blur the line between operational technology and IT networks. That convergence creates attack paths that traditional security tools were never designed to cover — and threat actors know it.
Manufacturing surpassed healthcare as the most ransomware-targeted sector in 2023. A single compromised workstation on an OT network can halt production lines, trigger costly downtime, and damage customer relationships.
Any manufacturer in the DoD supply chain handling Controlled Unclassified Information must achieve CMMC 2.0 certification. Non-compliance means loss of federal contract eligibility — a direct revenue risk.
As manufacturing systems connect to enterprise IT networks and cloud infrastructure, the attack surface expands dramatically. Legacy PLCs and SCADA systems were designed for reliability, not security.
Active Directory is increasingly used to manage access to OT environments. Attackers who compromise AD can pivot from corporate IT into industrial control systems with minimal detection.
Defense contractors and subcontractors face hard compliance deadlines. CMMC 2.0 certification is required for contract eligibility — and the assessment process takes longer than most organizations plan for.
CMMC 2.0 applies to all manufacturers in the DoD supply chain handling CUI. With tiered compliance levels and third-party assessment requirements, preparation typically takes 12 to 18 months.
NIST CSF 2.0 adds a new Govern function and expanded guidance for OT environments. Combined with NIST SP 800-82 for industrial control systems, it provides the framework manufacturers need to secure converged environments.
The Preparedness & Identity Resilience Assessment is a structured evaluation of your organization’s readiness for identity-based attacks and operational disruption. Delivered by Tec-Refresh, with Semperis supporting identity infrastructure components.
Assessment spots are limited. Tec-Refresh is working with California manufacturing organizations through Q2 and Q3 2026.
Request Your Assessment →A practical guide for California manufacturers navigating CMMC 2.0 compliance, operational technology security, and the identity infrastructure risks that span both IT and the factory floor.
Read the article →Hosted by Miguel Martinez (Tec-Refresh CTO) and Sean Deuby, Principal Technologist at Semperis. On-demand — get notified when it’s live.
Get Notified →A Tec-Refresh advisor will be in touch within one business day to discuss your organization’s needs and confirm next steps.
WorldStage2026 · Tec-Refresh + Semperis