Service Areas

Michigan’s automotive ecosystem — OEMs, Tier 1 suppliers, tooling manufacturers, and logistics providers — has spent two decades integrating operational technology into networked environments. Computer-aided manufacturing systems, robotic production controls, SCADA platforms managing paint and assembly operations, and plant-floor IoT devices now share network infrastructure with corporate systems that connect to the internet. The design intent was efficiency. The unintended result is a threat surface that extends from a supplier’s email system to a production line’s programmable logic controllers.The 2023 wave of ransomware attacks against automotive suppliers demonstrated the downstream consequence: a single mid-tier supplier’s production halt propagates within days to OEM assembly lines. SENTRY managed detection and response addresses this environment with OT-aware behavioral analytics that identify lateral movement between IT and OT layers before a ransomware payload reaches the production network. CITADEL physical security closes the facility access vector — because adversaries who gain physical access to a plant floor bypass network defenses entirely.Michigan’s data breach notification law, Act 452 of 2006, requires prompt notification to residents when sensitive personal information is compromised. For automotive suppliers handling employee data, customer financial information, and supplier payment records, the notification obligation compounds an operational breach event with a regulatory one. Compressed detection timelines — the core outcome of SENTRY’s 24/7 monitoring — directly reduce the scope and cost of both.

The Tank Automotive Research, Development and Engineering Center (TARDEC) and the Tank-Automotive and Armaments Command (TACOM) at the Detroit Arsenal in Warren represent a significant concentration of defense technology development. Organizations supporting those programs handle CUI under CMMC 2.0 requirements that are now contractually enforced in DoD acquisition vehicles.Armorstack’s VERITY advisory practice serves Michigan defense contractors with a structured approach to CMMC 2.0: VERITY advisory scopes CUI boundaries and identifies control gaps, CORE managed IT builds the compliant infrastructure, and SENTRY delivers the continuous monitoring required under Level 2 certification. The Dearborn and Warren manufacturing communities, where automotive and defense supply chains overlap, often find that a single CMMC-aligned security posture satisfies obligations on both sides of that intersection.

University of Michigan Health, Michigan Medicine, Spectrum Health in Grand Rapids, and the broader academic medical center ecosystem across the state operate at the intersection of HIPAA technical safeguard requirements and the physical security complexity of large, open healthcare campuses. The threat actors targeting healthcare are not primarily interested in patient data — they are interested in the leverage that encrypted clinical systems provide for extortion. Ransomware attacks on hospital networks carry direct patient safety consequences when imaging systems, EHR access, and clinical decision support tools go offline.SENTRY’s clinical-environment monitoring spans both the IT network and the connected medical device environment, where traditional endpoint agents cannot be deployed. CITADEL’s physical security integration addresses the facility access vectors — server room physical security, pharmacy access control, and patient area surveillance — that regulatory surveys increasingly scrutinize alongside technical controls. VERITY advisory produces the risk documentation and board-level reporting that Michigan healthcare boards require under their governance obligations.

Local Focus