The Challenge: Reaching Frontline Teams in the Food Industry

For Andros, a major player in the food industry in Europe, cybersecurity is not just a matter of offices and data centres. With over 30 production sites spread across France, the group faces a significant challenge: raising awareness among operational staff — line operators, maintenance technicians, workshop managers — about the cyber risks now threatening the industry.

A Specific Industrial Context

Food production sites have unique constraints for cybersecurity awareness:

Operational Constraints

• Shift Teams: 24/7, staggered schedules, no common slots

• Limited Time: short breaks, cannot interrupt production

• Restricted IT Access: few or no computers on production floors

• Low Digital Interaction: staff often distant from digital tools

Increasing Security Challenges

• IT/OT Convergence: production systems are increasingly connected

• Sabotage Risks: phishing targeting industrial system access

• Regulatory Compliance: GDPR, NIS2, sector-specific requirements

• Supply Chain Protection: Andros is part of critical ecosystems

🏭 INDUSTRIAL REALITY

In Industry 4.0, the line between IT and OT is blurring. An operator clicking on a malicious link from a production tablet can compromise the entire line. Awareness among frontline teams is no longer optional.

The Solution: A Small Terminal on a Nationwide Tour for 1 Year

Brain Security deployed a Small Arcade Terminal specially designed for the industrial environment: compact, mobile, robust, and 100% autonomous. This terminal supports Andros for 1 year on a tour covering the entire French production network.

Device Features

Tailored for Industrial Sites

• Small Terminal: reduced footprint, easy to move between areas

• Absolute Plug-and-Play: plug in and play, no configuration needed

• Industrial Robustness: designed for production environments

• Complete Autonomy: no local IT needed, operates independently

Flexible Connectivity

• Wi-Fi or Ethernet depending on available infrastructure

• 4G/5G option for sites without an adequate network

• Automatic content synchronisation and leaderboards

Game Format Optimised for Onsite Use

• 3-minute Sessions compatible with breaks

• Super Quiz: 1 mistake = game over, addictive format

• Local Leaderboard resettable at each site

• Questions relevant to the industrial context (OT risks, physical access, BYOD, etc.)

Multi-Site Tour Model

Rotation Organisation

• 30+ sites visited over the year

• Duration per site: 1 to 3 weeks depending on size

• Logistics Managed by Brain (transport, installation, retrieval)

• Coordinated Schedule with local Andros teams

Site Communication Kit

• Custom posters announcing the terminal's arrival

• Launch emails tailored for operational staff

• Simple visual instructions (pictograms)

• QR codes for online rules and leaderboard access

Support and Maintenance Included

• Regular content updates (new threats, priority topics)

• Remote technical support

• Adjustments to questions based on field feedback

• Monthly reporting per site (participation, scores, trends)

📊 RESULTS AFTER 1 YEAR

• 30+ production sites reached across France

• Hundreds of employees directly engaged

• Rapid adoption thanks to the 3-minute format and leaderboard

• Increased visibility of cyber messages at sites

The Results: Frontline Engagement and Cultural Change

Quantitative Performance

The first months of touring validated the model:

• Hundreds of staff engaged at each site

• High participation rate even among shift workers

• Spontaneous use: staff naturally come during their breaks

• Progressive scores demonstrating effective learning

  
  

Organisational Impact

At the Production Sites

• New visibility of cyber issues in environments traditionally focused on physical/food safety

• Informal conversations among colleagues on best practices

• Identification of champions: some staff become local cyber champions

• IT/OT Integration: frontline teams better understand IT issues

For the Group Security Function

• Uniform coverage of the production network

• Field data: feedback on awareness gaps by site

• Facilitated communication: the terminal becomes a dialogue tool with site management

• Demonstrable ROI: objective metrics of engagement and improvement

For Employees

• Constraint-free awareness: no mandatory training perceived as time-wasting

• Progressive learning: ability to replay and improve

• Fun aspect: competition via the leaderboard creates a motivational setting

• Recognition: top scores are locally celebrated

Evolution of the Device During the Tour

Content Adjustments

• Adaptation of questions according to field feedback (level, relevance)

• Incorporation of emerging themes (deepfakes, CEO fraud)

• Focus on specific agri-food risks (sabotage, industrial espionage)

Engagement Mechanics

• Introduction of inter-site challenges (anonymised score comparisons)

• Local prize giveaways (goodies, internal recognition)

• Creation of a "group hall of fame" for top scores

🎯 LESSON FOR CISOs

"Awareness for frontline teams cannot rely on traditional e-learning modules. It's necessary to reach them with formats compatible with their operational constraints. The mobile terminal solves this equation."

Why This Model Works for the Industry

Key Success Factors

1. Physical Presence In industrial environments, having a tangible device has a bigger impact than digital communications. The terminal = "cyber is here, visible, real".

2. Universal Accessibility No need for PCs, logins, or advanced digital skills. The arcade interface is intuitive for everyone, even those less comfortable with IT.

3. Micro-learning Format 3 minutes respect the constraints of production site breaks. No long trainings that disrupt the organisation.

4. Group Dynamics The local leaderboard creates competition among teams, shifts, and departments. The social aspect amplifies engagement.

5. Total Autonomy For site managers, it's zero burden: no IT to engage, no logistics to manage, no organisation to orchestrate.

Sector Applicability

The mobile terminal tour model applies to all industrial sectors:

Manufacturing Industry

• Automotive: assembly plants, logistics sites

• Aerospace: production workshops, maintenance centres

• Chemical/pharma: production sites, laboratories

Energy & Utilities

• Power plants (nuclear, thermal, hydro)

• Distribution networks (electricity, gas, water)

• Renewable production sites

Retail & Distribution

• Logistics warehouses

• Distribution centres

• E-commerce platforms

Multi-Site Services

• Bank branch networks

• Retail chains

• Hospitality and catering

Extending Impact After the Tour

Possible Follow-Ups

At the end of the tour year, several options are available to Andros:

Option 1: Renewal Extend the tour with new content and themes to maintain engagement.

Option 2: Permanent Installation Place terminals in residence at strategic sites for continuous engagement.

Option 3: Digital Complement Deploy the Brain SaaS platform so employees can continue playing from home or the office.

Option 4: Event Format Organise cyber days on sites with terminals + dedicated animation + inter-team challenges.

Future Themes

The tour can evolve to address specific focuses:

Focus on OT/Industrial

• Industrial control system security

• Physical and logical access management

• Protection of PLCs and SCADA

• Risks of sabotage and espionage

Focus on Compliance

• GDPR and personal data on site

• NIS2 and sector requirements

• Data traceability and integrity

• Incident management and notification

Focus on Social Engineering

• Sector-specific phishing

• CEO fraud/fake orders

• Physical social engineering

• Protection of sensitive information

  
  

💡 OPERATIONAL TIP

Coordinating the terminal tour with other initiatives (phishing campaigns, local CISO training, audits) creates reinforcing effects. Awareness works better with multi-touch rather than a one-shot approach.

Want to Deploy a Similar Tour?

The mobile terminal model adapts to all types of multi-site networks: industrial, retail, services. Brain Security handles all logistics, from transport to maintenance.

Next Steps:

• Discover the Small Arcade Terminal → brainsecurity.io/borne-arcade

• Talk with our team to define the optimal format for your site network