Key Takeaways
- Nearly one‑third of UK manufacturers suffered a cyber incident in the past year, with operational delays affecting 31% of affected firms.
- Cyber attacks also caused component shortages (23%) and delivery delays (31%), underscoring significant financial and supply‑chain repercussions.
- While awareness is rising, preparedness is uneven: only about half have a formal incident‑response plan or senior‑level cyber ownership, and fewer than a quarter employ a dedicated CISO.
- Cybersecurity has become a commercial prerequisite; customers and partners now demand proof of data protection, uptime, and supply‑chain integrity before contracting.
- A substantial share of manufacturers either lack cyber insurance or are unsure whether existing policies cover cyber‑related disruption.
- Experts warn that traditional IT‑focused tools cannot see operational technology (OT) assets on the factory floor, leaving production lines vulnerable to rapid, costly shutdowns.
- The Make UK report urges manufacturers to treat cybersecurity as a board‑level priority, stress‑test response plans, train workforces, tighten supplier assurance, and verify insurance coverage.
Introduction and Report Context
Make UK, the national trade association for the UK manufacturing sector, released its Cyber Security in Manufacturing report on 10 August 2024. The study draws on data from the association’s own Cyber Resilience 2026 survey, supplemented by broader industry and government sources, to gauge the sector’s readiness against digital threats. By combining self‑reported experiences with external benchmarks, the report offers a comprehensive snapshot of how UK manufacturers are confronting an increasingly hostile cyber landscape.
Prevalence and Operational Impact
Almost a third of UK manufacturers (30%) reported experiencing a cyber incident over the previous year, either directly or through their supply chain. Of those affected, 31% noted reduced production capacity and operational delays, illustrating how cyber events quickly translate into tangible shop‑floor disruptions. These figures highlight that cyber risk is no longer a peripheral concern but a core factor influencing day‑to‑day manufacturing performance.
Financial Losses and Supply‑Chain Disruptions
Beyond halted lines, cyber incidents generated measurable financial and logistical strain. Twenty‑three percent of hit manufacturers suffered component or material shortages, while another 31% reported delays in delivering products to customers. Such disruptions erode revenue, inflate remedial costs, and damage reputations, proving that the fallout from a breach extends far beyond IT systems to affect the entire value chain.
Awareness Growth vs Preparedness Gaps
The report acknowledges a growing awareness of cyber threats across the sector, yet preparedness remains markedly uneven. Many firms have adopted basic cyber‑hygiene measures—such as patch management and password policies—but critical structural gaps persist. For instance, while 51% of respondents confirmed possessing a formal cyber incident‑response plan and 45% have assigned senior leadership responsibility for cybersecurity, nearly half of all UK manufacturers lack either of these baseline safeguards.
Governance and Leadership Deficits
Leadership oversight lags behind the evolving threat landscape. Fewer than a quarter of surveyed businesses (23%) employ a dedicated Chief Information Security Officer (CISO), indicating a shortage of specialized executive stewardship. This governance gap emerges at a moment when cyber readiness has shifted from a back‑office IT issue to a primary commercial consideration, leaving many manufacturers without the strategic direction needed to align security investments with business objectives.
Cybersecurity as a Commercial Requirement
Commercial partners and customers increasingly demand verifiable proof of robust data protection, continuous system uptime, and supply‑chain integrity before entering contracts. Cybersecurity has thus become a gate‑keeping factor in procurement and supplier qualification processes. Manufacturers that cannot demonstrate mature cyber practices risk losing business opportunities, as buyers prioritize resilience alongside price and quality.
Cyber Insurance Uncertainty
Despite the rising financial stakes, a significant portion of manufacturers remain exposed through inadequate or unclear insurance coverage. Almost a third either operate without cyber insurance or are uncertain whether their existing policies encompass cyber‑related business interruption and operational delays. This uncertainty leaves firms vulnerable to uncovered losses when attacks materialize, amplifying the financial fallout of incidents.
Expert Insight on Visibility Challenges
Andrew Lintell, General Manager for EMEA at Claroty, highlighted a core technical limitation: many traditional IT‑centric security tools cannot see operational technology (OT) assets such as industrial control systems, sensors, and connected machinery on the factory floor. “You can’t defend or manage what you can’t see,” he noted, explaining that the resulting blind spots manifest as halted production lines and missed shipments—direct financial hits that arise far faster than typical IT ticket resolution.
Strategic Recommendations for Manufacturers
To close these vulnerabilities, Make UK prescribes a set of actionable steps:
- Formalize and regularly stress‑test an incident‑response plan so the organization is prepared before disruption hits.
- Implement mandatory workforce cybersecurity awareness training to close internal skills and hygiene gaps.
- Elevate third‑party supplier assurance protocols to mitigate risks originating within the wider supply chain.
- Review and audit insurance policies to verify adequate financial protection against business interruption and operational delays.
These measures aim to move firms from passive compliance toward proactive, resilience‑focused postures.
Conclusion and Path Forward
The Make UK report makes clear that UK manufacturing stands at a crossroads: cyber threats are increasingly common, costly, and intertwined with commercial viability, yet many firms still lack the governance, visibility, and preparedness needed to defend effectively. By treating cybersecurity as a board‑level priority, investing in OT‑aware defenses, strengthening supply‑chain assurances, and ensuring robust insurance coverage, manufacturers can transform vulnerability into resilience. Acting now will not only safeguard production lines but also secure the trust of customers and partners in an increasingly digital marketplace.