Case Study: Building Cyber Defense For Packaging Companies
How a Packaging Company Secured Daily Operations and Reduced Cyber Insurance Premiums by 63%
Industry Example: Packaging and Containers
Company Size: 120 employees
Annual Revenue: US $18 million
Estimated Cyber Insurance Premium (Before): US $18,000/year
Estimated Cyber Insurance Premium (After): US $7,000/year
Savings: 63% reduction in annual premiums
The Challenge
A leading packaging and containers manufacturer faced growing cybersecurity challenges as it modernized operations. The company has recently expanded into digital supply chain management, leveraging connected production equipment, systems, and customer/vendor portals.- While these advancements improved efficiency and traceability, they also expanded the attack surface:
- Legacy systems running critical production lines with limited patching visibility
- Connected manufacturing equipment with minimal monitoring and segmentation
- Vulnerable supplier and customer portals exposing order, shipment, and billing data
- Increased ransomware risk targeting production downtime, fulfillment delays, and logistics
- Rising cyber insurance costs as underwriters demanded validated controls and resilience documentation
The Solution
Partnering with a cybersecurity provider (following the Antigen Security approach), the manufacturer deployed a cyber assurance and visibility platform designed for packaging production and supply chain environments. Key components included:- Continuous Control Validation: Automated checks for endpoint protection, patching, and privileged access management across IT systems, production equipment, and plant operations.
- Network Segmentation & Visibility: Real-time monitoring of communication between production lines, ERP systems, warehouse systems, and cloud-based order platforms to detect anomalies.
- Supplier & Customer Portal Security: Continuous scanning of vendor portals, customer order systems, connections, and shared environments to identify exposures and misconfigurations.
- Incident Readiness & Simulation: Customized response playbooks for ransomware, production downtime, order fulfillment disruption, and supplier compromise.
- Insurance-Ready Reporting: Delivery of detailed evidence, mapped to frameworks, showing validated controls and risk scores for underwriters, customers, and partners.
The Outcome
Faster Risk Reduction and Greater Visibility Within 45 days, the platform identified:- Outdated firmware on production line controllers impacting packaging operations
- A supplier portal with exposed credentials tied to order and shipment data
- Gaps in backup verification for production scheduling and warehouse systems
- Cyber control compliance improved within 90 days
- Insurance renewal negotiations led to a 63% reduction in annual premiums
- $11K in direct annual premium savings
- Expanded coverage for operational incidents and supply chain disruptions
- No unplanned downtime events due to cyber incidents in the following 12 months
- Improved production continuity and on-time delivery for key customers
- Simplified vendor and customer cybersecurity reporting requirements
- Enhanced trust with insurers, suppliers, and major brand clients
- Strengthened reputation as a secure, digitally enabled packaging partner
- Increased resilience across manufacturing, warehousing, and distribution operations
Why It Matters for the Packaging and Containers Industry
The packaging industry is rapidly digitizing, connecting production systems, supply chains, and customer platforms to improve speed, traceability, and efficiency. However, these advancements introduce new cybersecurity risks:- Ransomware targeting production lines and fulfillment operations
- Supply chain data exposure and order manipulation risks
- Legacy industrial systems vulnerable to cyber threats
- Increasing insurance scrutiny and stricter underwriting requirements
- Reduce insurance costs and improve underwriting outcomes
- Prevent costly production downtime and fulfillment disruptions
- Strengthening customer and supplier trust
- Protect sensitive operational and order data
- Build resilience across connected manufacturing and logistics ecosystems