Gerresheimer manufactures primary pharmaceutical packaging, drug delivery systems like syringes and autoinjectors, and diagnostic devices. Headquartered near Düsseldorf since 1864, the company operates production sites across 16 countries on three continents, employing around 10,000 people. Its products serve pharmaceutical, biotech, and healthcare clients.
From a security standpoint, the threat model is clear: a compromised production environment or supply chain doesn't just mean data loss - it means potential physical harm to patients and massive regulatory exposure. Gerresheimer's footprint spans glass and plastic packaging lines, medical device assembly, and diagnostic product manufacturing. That means OT security isn't an afterthought; it's foundational. The attack surface includes industrial control systems, connected manufacturing equipment, and the IT/OT convergence points that sit between enterprise networks and production floors.
Security teams operating in this environment need fluency across domains: hardening SCADA and PLC systems, securing pharmaceutical serialization data, managing identity and access across global sites, and meeting compliance frameworks like FDA 21 CFR Part 11 and GxP standards. The work involves protecting intellectual property tied to drug delivery innovation while ensuring uptime across a distributed, multinational manufacturing operation where downtime has direct clinical consequences.
