--- title: "Manufacturing IT That Keeps Production Running | TRNSFRM" url: https://trnsfrm.tech/industries/manufacturing description: "Managed IT and cybersecurity for manufacturers. ERP uptime, shop floor PCs, CNC and engineering data, vendor access, insurance and customer questionnaires." lang: en --- Managed IT and cybersecurity for manufacturers # Keep the ERP up, the machines running, and the drawings where they belong. Your plant runs on more software than most people realize. When any of it stops, shipping stops with it. or call (877) 777-6855: +18777776855 5.0 from 177 Google reviews · Founded 2008 · US-based W-2 engineering team 45 minutes with a senior engineer. You keep the written snapshot either way. ## What goes wrong in a plant when nobody owns IT Most manufacturers we meet don't have an IT problem they can point to. They have a lot of small ones nobody is watching. ### The ERP goes down on a Monday morning. Nobody can see the schedule, pull a pick list or print a packing slip. The backup exists, but nobody has tried to restore it. ### One person knows how the floor works. They know which PC sends programs to which machine and where the post processors live. When they are on vacation, or gone for good, so is that knowledge. ### Customer drawings live everywhere. Email, a shared drive, a USB stick in the toolroom, a programmer's laptop. You couldn't say who has a copy. ### Machine vendors have their own way in. A builder installed TeamViewer or a remote box years ago so they could support the machine. It is still on, and nobody remembers the password. ### Old Windows runs the floor. The CMM, the test stand and the CNC control PC run Windows 7 or older because the vendor never certified anything newer. They sit on the same network as email. ### The paperwork gets harder. A customer sends a long security questionnaire. The cyber insurance renewal asks about MFA, backups and admin rights. You answer from memory and hope. ### Second shift has nobody to call. The plant runs nights and weekends. Your IT help doesn't. None of these feel urgent until the day one of them stops a shipment. ## The systems your plant runs on, and where they break We support the software manufacturers actually run, and we work with your vendors instead of around them. ### ERP and MRP Epicor Kinetic, Plex, JobBOSS², ECI E2 Shop System, Global Shop Solutions, Infor SyteLine, DELMIAworks, SAP Business One, Microsoft Dynamics 365 Business Central, ProShop. **Where it breaks:** an aging server nobody wants to touch, a database backup nobody has restored, every user running as an admin, a vendor login that never expires, and an upgrade pushed off for years because nobody owns the plan. ### CAD, CAM and engineering data SolidWorks and SolidWorks PDM, Autodesk Inventor, AutoCAD, Autodesk Vault, Fusion, Mastercam, Esprit. **Where it breaks:** license servers on a desktop under someone's desk, PDM vaults with no tested backup, customer models copied to personal laptops, and engineers who need admin rights for one plugin and keep them for everything. ### CNC program transfer and the shop floor DNC software such as CIMCO DNC-Max or Predator DNC, plus the USB sticks that fill the gaps. Machine monitoring and MES. CMM software such as PC-DMIS or Zeiss Calypso. **Where it breaks:** a DNC PC that is the only path to a machine, programs that exist in one place, and floor PCs nobody has patched because nobody knows what a patch would do to the control. ### PLCs, HMIs and SCADA Allen-Bradley and Siemens PLCs, operator HMIs, SCADA platforms such as Ignition or FactoryTalk. **Where it breaks:** a flat network where an infected office laptop can reach a controller, and remote access the integrator set up and never took back. ### Quality and compliance records QMS platforms such as ETQ Reliance, plus the spreadsheets and shared folders that hold inspection records, certs and PPAP packages. **Where it breaks:** records that only exist on one server, and no way to prove who changed what. ### The office side Microsoft 365, email, Teams, EDI connections to your customers, label printers and shipping stations, phones. **Where it breaks:** a phished email account that starts sending fake invoices to your customers, and an EDI connection that fails quietly until a customer calls. ## The questions you are already getting You don't have to be a defense contractor to get asked hard questions about security. Most manufacturers hear them from four places. - **Customers.** Larger customers send security questionnaires with the purchase order. They want to know about MFA, backups, encryption, access reviews and incident response, and they want it in writing. - **Your insurer.** Cyber insurance applications ask what you have in place. If an answer is wrong and you have a claim, that answer matters. - **Your owners and lenders.** When a buyer, a bank or a private equity group looks at the company, IT and security are on the diligence list. - **Yourself.** How long would it take to get the ERP back? Who has access to the customer drawings? What happens if the one person who knows the floor leaves? Those are fair questions, and you should have answers. We help you answer all four with documents, not guesses. ## Defense work is a different job Most manufacturers do not need CMMC. It applies to companies that hold Department of Defense contracts or subcontracts that call for it. If you don't do DoD work, skip this section. If you do, the question is not "are we compliant." It is "what do our contracts actually require, and can we show it." Your contracts and your prime's flow-down clauses decide what applies to you. Read them, or have your counsel read them. What readiness usually involves: - **Knowing what you hold.** Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) are handled differently. Start with what your prime actually sends you. - **Drawing the CUI boundary.** Which people, machines, folders, cloud tenants and floor PCs touch controlled drawings. A tight boundary is cheaper to protect and easier to assess. - **NIST SP 800-171.** The 110 requirements behind CMMC Level 2. Your System Security Plan (SSP) says how you meet them, and your plan of action (POA&M) says what is still open. - **Your SPRS score.** If you have posted a self-assessment score in the Supplier Performance Risk System, it should match what an assessor would find. - **Evidence that builds over time.** Logs, access reviews, training records, backup tests and change records have to show controls working over months. You can't produce months of evidence the week before an assessment. We are not a C3PAO. We get you ready for one: gap audit, remediation, SSP and POA&M, evidence, and running the environment after. Book a CMMC gap audit: https://trnsfrm.tech/book?offer=gap-audit Read more for DoD suppliers: https://trnsfrm.tech/industries/defense-dod-suppliers Related: FCI vs CUI for manufacturers (https://trnsfrm.tech/blog/manufacturers-fci-vs-cui-cmmc) · A CUI drawing from receipt to delete (https://trnsfrm.tech/blog/cui-drawing-from-prime-receipt-to-delete) · Your SPRS score is a signed statement (https://trnsfrm.tech/blog/sprs-score-signed-statement-dod-suppliers) · What the Phase 2 pause changed (https://trnsfrm.tech/resources/cmmc-phase-2-paused) ## What we do about it ### 1. Run your IT day to day. Help desk, devices, Microsoft 365, servers, networks and vendors, handled by our US-based W-2 engineering team. Already have an IT person or a team? We work alongside them. You don't have to fire anyone to work with us. Co-managed IT (https://trnsfrm.tech/services/co-managed-it) ### 2. Keep the ERP recoverable. Backups that are separate from your network, and restore tests on a schedule, so you know how long it takes to get Epicor, Plex or JobBOSS² back before you need to. Why ERP restore testing matters (https://trnsfrm.tech/blog/erp-restore-testing-manufacturers) ### 3. Separate the floor from the office. Segment the network so office email, engineering and the machines don't share one flat network. We plan changes around your shifts and your machine vendors, not the other way around. Flat networks and segmentation (https://trnsfrm.tech/blog/ot-it-flat-network-construction-plant-segmentation) ### 4. Contain the old Windows machines. When a CNC control PC or a CMM can't be upgraded, we isolate it, limit what it can reach, and watch it. We don't patch a machine controller without the vendor's sign-off. Legacy Windows on the shop floor (https://trnsfrm.tech/blog/legacy-windows-shop-floor-cnc-hmi-test-stations) ### 5. Take back vendor remote access. Find every remote tool and integrator login, shut off what nobody uses, and replace the rest with access that is approved, logged and time-limited. Who has the keys (https://trnsfrm.tech/blog/vendor-app-access-who-has-the-keys) ### 6. Protect the engineering data. Know where customer drawings and models live, who can open them, and what leaves the building. Set a plain policy for AI tools before someone pastes a customer print into one. Shadow AI on the shop floor (https://trnsfrm.tech/blog/shadow-ai-shop-floor-ai-policy-manufacturers) ### 7. Watch for attacks around the clock. Endpoint detection and response, monitored 24/7, with email protection and MFA on the accounts that matter. Cybersecurity (https://trnsfrm.tech/cybersecurity) ### 8. Write it down. Network maps, runbooks, vendor contacts, admin accounts and recovery steps, written so the next person can follow them. That is what turns one person's memory into something the company owns. It is also what you hand a customer, an insurer or an auditor. Plus a technology roadmap and budget from a virtual CIO, so upgrades happen on a plan instead of in a crisis. (vCIO (https://trnsfrm.tech/vciso)) ## How we start 1. **1. Book your free risk review.** 45 minutes with a senior engineer. No SDR. No slide deck. 2. **2. Get a written snapshot.** One page, ranked by what to fix first. You keep it either way. If we find nothing worth fixing, we'll tell you that in writing. 3. **3. We run it and secure it.** Managed, monitored and documented, with a plan you can see. ## Who you will work with Image: Jeff Dennis (https://trnsfrm.tech/assets/jeff-dennis-hero-400-FZSTqw23.webp) ### Jeff Dennis, Founder & CEO. Running TRNSFRM since 2008. Image: Bill Reed (https://trnsfrm.tech/assets/bill-headshot-thumb-160-D-A5v-Bu.webp) ### Bill Reed, Lead CISO. Carnegie Mellon, DoD red team, CERT. Image: Russ Taylor (https://trnsfrm.tech/assets/russ-taylor-headshot-thumb-160-CEopnnpa.webp) ### Russ Taylor, Director of Operations. More than 16 years in IT operations. Image: Andy Mason (https://trnsfrm.tech/assets/andy-mason-headshot-thumb-160-C0gFe11Y.webp) ### Andy Mason, Senior Solutions Architect. More than 30 years across IT engineering and construction, including secure IoT, cloud infrastructure and industrial networks. Backed by our US-based W-2 engineering team. We support manufacturers nationwide. ## What clients say > "Even when tackling tough problems, they deliver on time, in budget, and with a smile. Jeff and his team have been fantastic to work with." John Bellett, Custom Rubber Corp, Google review 5.0 from 177 Google reviews **Case study:** How a precision manufacturer got CMMC-ready, moved CUI to GCC High and cut over a new ERP without losing a production day (https://trnsfrm.tech/case-studies/manufacturer-cmmc-gcc-high-erp-cutover) Specialties ## More manufacturing ### Defense and DoD suppliers Read about Defense and DoD suppliers https://trnsfrm.tech/industries/defense-dod-suppliers ### Aerospace and space Read about Aerospace and space https://trnsfrm.tech/industries/aerospace-space ### Automotive suppliers Read about Automotive suppliers https://trnsfrm.tech/industries/automotive-suppliers ### Medical device manufacturing Read about Medical device manufacturing https://trnsfrm.tech/industries/medical-device-manufacturing ## Frequently asked questions ### Do we need CMMC? Only if you hold, or want, Department of Defense contracts or subcontracts that require it. Most manufacturers don't. If you do DoD work, your contracts and your prime's flow-downs tell you what applies. We can help you read them and figure out what you actually hold. ### Will you work with our ERP vendor and our machine builders? Yes. Your ERP vendor knows the application. We handle the servers, backups, access, network and security around it, and we coordinate with them on upgrades and support sessions. Same with machine builders and integrators. ### We have old Windows PCs running machines. Do we have to replace them? Not necessarily. Many can't be replaced without replacing the machine. We isolate them, control what they can reach, and monitor them. When a replacement makes sense, we put it on the roadmap with a budget. ### Will this disrupt production? We plan network and floor changes around your shifts and schedule them with the people who run the machines. Nothing on the floor changes without your sign-off. ### We already have an IT person. Do we need to replace them? No. We can take on the work they don't have time for, like security monitoring, backups, documentation and after-hours coverage, and leave them the work they know best. ### Can you help with customer security questionnaires and insurance applications? Yes. We help you answer them accurately and keep the documents that back up each answer. ### What does it cost? It depends on your users, sites and systems. See pricing, or book the free risk review and we'll give you a straight number. ## Find out where your plant stands. 45 minutes with a senior engineer, a written one-page snapshot, and a clear list of what to fix first. No SDR. No slide deck. or call (877) 777-6855 (+18777776855) ## Further reading ### How long does it take to recover from ransomware?: https://trnsfrm.tech/blog/how-long-does-it-take-to-recover-from-ransomware ### ERP restore testing for manufacturers: https://trnsfrm.tech/blog/erp-restore-testing-manufacturers ### Legacy Windows on the shop floor: https://trnsfrm.tech/blog/legacy-windows-shop-floor-cnc-hmi-test-stations ### Vendor app access: who has the keys?: https://trnsfrm.tech/blog/vendor-app-access-who-has-the-keys ### Remove local admin rights: https://trnsfrm.tech/blog/it-hygiene-remove-local-admin-rights ### Security decisions only the owner can make: https://trnsfrm.tech/blog/owner-guide-security-decisions-only-you-make Call Now: +18777776855 ## Structured data ```json [ { "@context": "https://schema.org", "@type": "Organization", "name": "TRNSFRM", "legalName": "Bitboyz LLC", "alternateName": [ "TRNSFRM Technology", "Bitboyz", "Bitboyz LLC", "Bitboyz LLC DBA TRNSFRM" ], "url": "https://trnsfrm.tech", "logo": "https://trnsfrm.tech/wp-content/uploads/2021/11/trnsfrm-logo.svg", "image": "https://trnsfrm.tech/og-image.png", "description": "Cybersecurity, compliance, and managed IT services for manufacturers, construction, automotive, and healthcare organizations.", "foundingDate": "2008", "telephone": "+1-877-777-6855", "email": "info@trnsfrm.tech", "founder": { "@type": "Person", "name": "Jeff Dennis", "jobTitle": "Founder & CEO", "url": "https://trnsfrm.tech/", "sameAs": [ "https://www.linkedin.com/in/jefferydennis" ] }, "areaServed": [ { "@type": "Country", "name": "United States" }, { "@type": "City", "name": "Cleveland", "containedInPlace": { "@type": "State", "name": "Ohio" } }, { "@type": "City", "name": "Columbus", "containedInPlace": { "@type": "State", "name": "Ohio" } } ], "address": [ { "@type": "PostalAddress", "streetAddress": "10143 Royalton Rd Suite J", "addressLocality": "North Royalton", "addressRegion": "OH", "postalCode": "44133", "addressCountry": "US" }, { "@type": "PostalAddress", "addressLocality": "Columbus", "addressRegion": "OH", "addressCountry": "US" } ], "contactPoint": { "@type": "ContactPoint", "contactType": "customer service", "telephone": "+1-877-777-6855", "email": "info@trnsfrm.tech", "areaServed": "US", "availableLanguage": "English" }, "knowsAbout": [ "CMMC", "NIST 800-171", "ISO 27001", "HIPAA", "FTC Safeguards", "ITAR", "Managed IT", "vCISO", "vCIO", "Cybersecurity", "Microsoft GCC High" ], "makesOffer": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Cybersecurity", "url": "https://trnsfrm.tech/cybersecurity", "provider": { "@type": "Organization", "name": "TRNSFRM" } } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Governance & Compliance", "url": "https://trnsfrm.tech/governance", "provider": { "@type": "Organization", "name": "TRNSFRM" } } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Managed IT", "url": "https://trnsfrm.tech/managed-it", "provider": { "@type": "Organization", "name": "TRNSFRM" } } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "vCISO", "url": "https://trnsfrm.tech/vciso", "provider": { "@type": "Organization", "name": "TRNSFRM" } } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Integration & Implementation", "url": "https://trnsfrm.tech/services/ai", "provider": { "@type": "Organization", "name": "TRNSFRM" } } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Microsoft GCC / GCC High", "url": "https://trnsfrm.tech/services/microsoft-gcc", "provider": { "@type": "Organization", "name": "TRNSFRM" } } } ], "aggregateRating": { "@type": "AggregateRating", "ratingValue": "5.0", "reviewCount": "177", "bestRating": "5", "worstRating": "1" }, "sameAs": [ "https://www.linkedin.com/company/trnsfrmtech", "https://www.linkedin.com/in/jefferydennis", "https://clutch.co/profile/trnsfrm", "https://maps.google.com/?cid=0x8830ed5d3a6900c5:0xe344c24d13357f96", "https://www.goodfirms.co/company/trnsfrm", "https://www.bestitmsps.com/company/trnsfrm/" ] }, { "@context": "https://schema.org", "@type": "WebSite", "name": "TRNSFRM", "url": "https://trnsfrm.tech", "publisher": { "@type": "Organization", "name": "TRNSFRM" }, "potentialAction": { "@type": "SearchAction", "target": "https://trnsfrm.tech/blog?q={search_term_string}", "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "ProfessionalService", "name": "TRNSFRM", "legalName": "Bitboyz LLC", "alternateName": [ "TRNSFRM Technology", "Bitboyz", "Bitboyz LLC", "Bitboyz LLC DBA TRNSFRM" ], "url": "https://trnsfrm.tech", "image": "https://trnsfrm.tech/og-image.png", "telephone": "+1-877-777-6855", "email": "info@trnsfrm.tech", "address": { "@type": "PostalAddress", "streetAddress": "10143 Royalton Rd Suite J", "addressLocality": "North Royalton", "addressRegion": "OH", "postalCode": "44133", "addressCountry": "US" }, "areaServed": [ { "@type": "Country", "name": "United States" }, { "@type": "City", "name": "Cleveland", "containedInPlace": { "@type": "State", "name": "Ohio" } }, { "@type": "City", "name": "Columbus", "containedInPlace": { "@type": "State", "name": "Ohio" } } ], "priceRange": "$$", "sameAs": [ "https://www.linkedin.com/company/trnsfrmtech", "https://www.linkedin.com/in/jefferydennis", "https://clutch.co/profile/trnsfrm", "https://maps.google.com/?cid=0x8830ed5d3a6900c5:0xe344c24d13357f96", "https://www.goodfirms.co/company/trnsfrm", "https://www.bestitmsps.com/company/trnsfrm/" ] }, { "@context": "https://schema.org", "@graph": [ { "@type": "Service", "name": "Managed IT and Cybersecurity for Manufacturers", "description": "Managed IT and cybersecurity for manufacturers. ERP uptime, shop floor PCs, CNC and engineering data, vendor access, insurance and customer questionnaires.", "provider": { "@type": "Organization", "name": "TRNSFRM" }, "areaServed": "United States" }, { "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://trnsfrm.tech/" }, { "@type": "ListItem", "position": 2, "name": "Industries", "item": "https://trnsfrm.tech/" }, { "@type": "ListItem", "position": 3, "name": "Manufacturing", "item": "https://trnsfrm.tech/industries/manufacturing" } ] } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Do we need CMMC?", "acceptedAnswer": { "@type": "Answer", "text": "Only if you hold, or want, Department of Defense contracts or subcontracts that require it. Most manufacturers don't. If you do DoD work, your contracts and your prime's flow-downs tell you what applies. We can help you read them and figure out what you actually hold." } }, { "@type": "Question", "name": "Will you work with our ERP vendor and our machine builders?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Your ERP vendor knows the application. We handle the servers, backups, access, network and security around it, and we coordinate with them on upgrades and support sessions. Same with machine builders and integrators." } }, { "@type": "Question", "name": "We have old Windows PCs running machines. Do we have to replace them?", "acceptedAnswer": { "@type": "Answer", "text": "Not necessarily. Many can't be replaced without replacing the machine. We isolate them, control what they can reach, and monitor them. When a replacement makes sense, we put it on the roadmap with a budget." } }, { "@type": "Question", "name": "Will this disrupt production?", "acceptedAnswer": { "@type": "Answer", "text": "We plan network and floor changes around your shifts and schedule them with the people who run the machines. Nothing on the floor changes without your sign-off." } }, { "@type": "Question", "name": "We already have an IT person. Do we need to replace them?", "acceptedAnswer": { "@type": "Answer", "text": "No. We can take on the work they don't have time for, like security monitoring, backups, documentation and after-hours coverage, and leave them the work they know best." } }, { "@type": "Question", "name": "Can you help with customer security questionnaires and insurance applications?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. We help you answer them accurately and keep the documents that back up each answer." } }, { "@type": "Question", "name": "What does it cost?", "acceptedAnswer": { "@type": "Answer", "text": "It depends on your users, sites and systems. See pricing, or book the free risk review and we'll give you a straight number." } } ] } ] ```