Industries

Helping clients meet their business challenges begins with an in-depth understanding of the industries in which they work. That’s why KPMG LLP established its industry-driven structure. In fact, KPMG LLP was the first of the Big Four firms to organize itself along the same industry lines as clients.

How We Work

We bring together passionate problem-solvers, innovative technologies, and full-service capabilities to create opportunity with every insight.

Learn more

Careers & Culture

What is culture? Culture is how we do things around here. It is the combination of a predominant mindset, actions (both big and small) that we all commit to every day, and the underlying processes, programs and systems supporting how work gets done.

Learn more

Maximizing the Benefits of IT/OT Convergence in Pharma Life Sciences Manufacturing: Solutions to Common Challenges

As organizations’ Operation Technology (OT) become increasingly digitized and integrated with IT networks, threats to these operations grow in tandem.

In the Pharma Life Sciences industry, an operational disruption can pose a significant risk not just for the company itself, but also for downstream consumers. Production of goods can be critical to supporting the healthcare system at large, and failures in this space may have a considerable adverse impact on hospitals, patients, and other market consumers. As such, it is imperative that the OT environments supporting production and distribution remain secure and resilient and adopt a proactive approach to managing the risks of increased cyber-attacks in this industry.

Integrating the OT and IT sides of the house can include benefits such as:

  • Efficient Operations: Streamline the manufacturing process, increase productivity, reduce operational costs, and eliminate waste.
  • Real-time data analysis: Help manufacturers collect and analyze a vast amount of data in real-time. This data can provide insights into the manufacturing process, quality control, and resource utilization.
  • Quality control and compliance: Enable manufacturers to monitor and control the quality of their products and ensure compliance with regulatory requirements.
  • Predictive maintenance: Help manufacturers predict equipment failures and plan for maintenance, reducing downtime and associated costs.

These perks come at a cost. This includes an expanded attack surface, new threat vectors, and increased scope of assets to monitor and manage. So how can a PLS manufacturer begin to maneuver the risks found in their OT environment? Let’s look at the top three areas that organizations need to grapple with to begin to reconcile their OT security programs.

1

Establish Robust Governance: Secure integration of IT and OT environments relies heavily on having proper governance over the people, processes, technology, and data coming from both sides. Important considerations include managing access to systems and facilities, authorizing changes to the environment, and managing data between the business and production systems, among others. Having control over the organization’s top down processes allows for effective implementation of core security capabilities including access management, vulnerability management, device patching, security monitoring, and incident response. If an organization can trust their processes to function in times of duress, the organization will be more resilient during an adverse event.

2

Know Your Priorities: Between the business and operations environments, priorities diverge. Whereas the business may focus on increasing profits and positioning themselves in the cutting edge of the market, on the ground in manufacturing facilities the primary goal is to ensure a safe operating environment and doing so thoughtfully to avoid failures and harm to the operators. Organizations should establish a risk management function that facilitates the identification, prioritization, and resolution of threats and vulnerabilities according to the priorities and risk appetite of the respective environments.

3

Enhance Visibility: You can’t possibly mitigate risks if you don’t know where to look in the first place. It is vital to maximize visibility and control of the OT environment and to manage connections with the IT network. This includes advancing asset management capabilities to know what devices are on your network and monitoring the access to and activity of these assets. Enhancing asset intelligence enables:

  • Streamline the process of collecting and analyzing data about your network assets
  • Identify the most critical assets on your network to prioritize security efforts
  • Faster identification of unusual or unauthorized activity and potential security risks
  • Faster response times to adverse events.

Increasing awareness of the critical points in the network and overall visibility of the assets and activity in the operational environment can enable organizations to focus on building in security functions that provide resiliency when facing threats.

In the Pharma Life Sciences industry, organizations must take a proactive approach to managing risks associated with the converging IT/OT landscape. By ensuring robust governance over people, process, technology and data, and establishing a risk management process that aligns to the priorities of the OT environment, organizations can aim to lower the impact of failures and build resilient OT programs.

At KPMG, we can help our clients manage these risks through our industry experience across an array of OT cybersecurity issues including asset management, network monitoring, risk prioritization, and OT program governance.

Explore more

Insights on cyber security

KPMG professionals are passionate and objective about cyber security. We’re always thinking, sharing and debating. Because when it comes to cyber security, we’re in it together.

Read more

Meet our team

Image of Brad Raiford
Brad Raiford
Director Advisory, Cyber Security Services, KPMG US
Image of Scott Erven
Scott Erven
Principal, Cyber Security Services, KPMG US

Thank you!

Thank you for contacting KPMG. We will respond to you as soon as possible.

Contact KPMG

Use this form to submit general inquiries to KPMG. We will respond to you as soon as possible.

By submitting, you agree that KPMG LLP may process any personal information you provide pursuant to KPMG LLP's Privacy Statement.

An error occurred. Please contact customer support.

Job seekers

Visit our careers section or search our jobs database.

Submit RFP

Use the RFP submission form to detail the services KPMG can help assist you with.

Office locations

International hotline

You can confidentially report concerns to the KPMG International hotline

Press contacts

Do you need to speak with our Press Office? Here's how to get in touch.

Headline