# Six-Gear Roadmap towards the Smart Factory
## 5 The Six-Gear Roadmap
### Gear 2: Connectivity
#### 5.2.3 Cybersecurity Strategy  
Cybersecurity (CS) is one of the main challenges to connectivity in smart manufacturing [52] and one of the biggest barriers to Industry 4.0 adoption [16]. As soon as any device is connected to the internet, if not handled correctly, makes the whole network less secure and resilient, therefore, CS becomes critical because of the risks associated with it. An example of such risks can be hacking the machines and causing the production process to stop or even cause danger to the operator if the machines are externally manipulated. Also, as the network grow, so does the attack surface and to protect critical manufacturing assets, a CS defense strategy must be in place to address the threats.  
To get started on building a CS strategy, risks must be identified because security measures can be defined based on the risk profiles of the connected devices [63]. In manufacturing most likely the risks will be the machines, tools and the data they handle, its functions within the network operation and the potential impact to the network when it is breached. Once the risks have been identified, security strategies can be implemented where applicable ranging from designing a secure connectivity architecture at every layer of the IIoT stack, secure configuration of connected devices and systems on the network during system installation as well as continuous maintenance of the IT/Network infrastructure.  
There are regulations and code of practices available to identify suitable procedures and measures ensuring privacy and security of connected devices over the internet [63; 64; 65; 66; 67]. However, in the manufacturing industry, the confidentiality or privacy of the data collected from the plant floor is not crucial because no personal data is collected, therefore, security measures to protect such data that complies with the General Data Protection Regulations (GDPR) [64] might not be required. However, the integrity of the data collected is fundamental to the operation of the service and that has to comply with the NIS Directive [65] as IIoT connected devices provide data collection service to the manufacturing industry.  
When designing the connectivity architecture of the smart factory, it is important to get the IT department on board from the start to assist on building upon existing IT, network and security policies to address the inclusion of connected devices and their interoperability [68]. A recent survey by Cisco suggests that only 26% of companies that began IoT initiatives succeeded [69] mainly due to best practice approach taken in terms of collaboration with IT and IIoT experts.  
A case study presented an example of an industrial collaboration to address factory level network connectivity and cybersecurity of an IIoT system; known as the iSMART factory concept [32; 52]. This collaboration was between global machine equipment manufacturers \"Yamazaki Mazak\" and the IT giants \"Cisco\" teaming up together to connect machines securely via MT-Connect protocols and Industrial IT switches embedded with network security to help prevent any issues with unauthorized access to or from the machines and equipment within the network.