Manufacturing buyer's guide
Security buyer's guide — manufacturing & industrial
Perimeter, yard, dock, and production-floor coverage that stays out of process safety. Designed for sites with real OT-network boundaries.
8 minute read
Industrial security has to coexist with operational technology networks, safety protocols, and heavy-duty environmental conditions. The security system is one of many systems in the building — and a badly designed one becomes a liability, not an asset.
Compliance at a glance
Four KPIs to benchmark.
- Perimeter coverage
- 100% fence line
- LPR accuracy
- >= 95% usable reads
- OT network isolation
- Required
- Firmware cadence
- Quarterly review
Priorities
What matters most, in order.
01Perimeter & yard coverage
Fence lines, loading yards, secure-area boundaries.
02Dock-door analytics
Vehicle arrivals, plate recognition, trailer seals.
03OT network isolation
Security VLAN kept away from PLCs and SCADA.
04Environmental-grade hardware
Dust, vibration, wash-down if applicable.
Perimeter and yard
Thermal or analytics-assisted perimeter cameras catch what visible-light cameras miss at night. For 24/7 operations that matters; for day-only operations a well-placed visible-light camera with analytics suffices.
LPR at vehicle entries is table stakes for logistics sites. Integrate with the delivery schedule system and loitering vehicles get flagged automatically.
Network boundaries
Security devices belong on their own VLAN — never on the OT network that runs the PLCs and SCADA. Breaches in commercial security tools have propagated to production networks because of flat networks; this is preventable with basic segmentation.
Firmware governance is critical because industrial NVRs and cameras end up exposed to the internet in poorly maintained sites. A documented patch schedule and credential rotation policy closes this gap.
Production floor
Cameras on the production floor should support safety and loss prevention, not surveillance of workers. Position them to frame process flow, choke points, and emergency stops — not individual work stations.
Union and labour agreements may require consultation before cameras are installed. Build the consultation into the project timeline; retrofitting after an objection is expensive.
RFP / vendor checklist
Use this to evaluate any quote.
Perimeter plan with analytics
Documented framing, coverage, and analytic rules at every fence/gate.
Dock LPR + seal audit
Every inbound/outbound captured and retained.
OT / IT segmentation
Security devices on dedicated VLAN with restricted ingress to OT network.
Firmware governance
Documented schedule, owner, and credential-rotation policy.
Environmental-grade enclosures
IP-rated appropriate to each zone (dust, wash-down, cold).
Labour consultation record
Documented consultation with union or labour rep before production-floor install.
Red flags
Walk away if you see these.
Security cameras and NVRs share a VLAN with OT devices.
Firmware update procedure is 'when we remember'.
Standard commercial hardware specified for wash-down or cold-chain areas.
No documented consultation with labour on production-floor coverage.
Want this guide applied to your site?
A site walk + written recommendation against this checklist, usually within a week.