In 2021 a security review, prepared ahead of a naval customer's supplier audit, found that nineteen of our sixty-three CNC machines loaded programs from computers running an operating system its vendor no longer supported. Machinists moved programs on USB sticks. Four of the nineteen controllers also had failing parts that were becoming hard to source. Our production general manager and chief financial officer favoured replacing eleven machines at a quoted A$13.4 million, arguing that new equipment would add capacity and settle the auditors' concern in one move.
I recommended a different first step. We separated the machine network from the office network, installed a program server that released only approved, revision-matched programs, sealed the USB ports, locked the old computers to the applications they needed and retrofitted the four failing controllers. The cost was A$1.9 million over nine months. The trade-off was real: we gave up the capacity new machines would have brought, and machinists lost a quick habit they valued. The production general manager told the board that program loading would slow the night shift, and for two months he was right.
Finance also worried that the customer might still insist on replacement and leave us paying twice. I asked the customer's security team to review the design before we built it; they accepted it with two changes.
By month nine every program reached those machines through the server. Controller-related stoppages fell from 31 hours a month to nine, mainly because of the retrofits. The audit closed with two minor findings, both about documentation. In 2024 we replaced three of the nineteen machines, for A$4.6 million, on capacity grounds the board considered separately.
What I would do differently is involve the machinists before the first design. Our initial version required walking to a terminal at the end of each bay to request a program. A request screen at each machine, added in month three, should have been there from the start.