In the aerospace supply chain, protecting the information entrusted by customers is part of a supplier’s responsibility. Drawings, CAD models, technical documentation and production data represent valuable assets that must be protected with the same level of care devoted to the quality of the components being manufactured.

With this objective in mind, LOMEC Aerospace embarked on a journey to strengthen its cybersecurity, leading to the achievement of Cyber Essentials certification in June 2026.

The certificate, awarded on 4 June and covering the entire organisation, confirms that LOMEC’s ICT defences have been assessed as appropriate against the most common and automated cyber attacks.

It represents an important first milestone in a broader journey that continues to require investment, time and a significant rethinking of the company’s IT infrastructure.

Cyber Essentials assesses several key areas of cybersecurity, including network protection, secure system configuration, account and access privilege management, malware protection, software updates and patching, and the management of the infrastructure included within the scope of the certification.

For LOMEC, however, the value of this achievement goes beyond the certification itself.

Eighteen months of work on our IT infrastructure

In these months we have taken a structured approach to strengthening our IT architecture. Hardware and systems have been upgraded, servers and firewalls have been renewed, backup systems have been reinforced, and new measures have been introduced to increase the organisation’s overall level of protection.

This was therefore not simply a technical upgrade, but a broader project that required both financial and organisational investment and involved the company as a whole.

When it comes to cybersecurity, technology is only one part of the equation. An up-to-date and secure infrastructure is essential, but it is not enough unless it is supported by proper procedures and by people who understand their role in protecting information.

For this reason, we have also invested significantly in staff training, with activities aimed at different levels of the organisation. Information security is not only the responsibility of those who manage IT systems: it concerns anyone who uses devices, accesses technical documentation, or works with company data and information

A voluntary choice aligned with the market in which LOMEC intends to grow

For LOMEC, the path towards Cyber Essentials was not driven by a regulatory obligation.

It was a deliberate choice, made ahead of what would be strictly required for a company of our size and fully aligned with the type of market in which we operate and intend to continue growing.

Today, the aerospace and defence supply chain requires increasingly high levels of attention not only to product quality, but also to the way information is managed.

By manufacturing components for these sectors, we come into contact with technical drawings, CAD models, production data, product documentation, programme information and content subject to confidentiality requirements.

This information forms part of the customer’s technical and industrial assets. Protecting it therefore means protecting their know-how.

And this is precisely one of the key aspects of the path undertaken by LOMEC: ensuring that reliability is not limited to what leaves the production floor, but also extends to the way the data required to achieve that result is managed and protected.

Protecting customer know-how is part of supply quality

In aerospace manufacturing, quality has traditionally been associated with machining precision, compliance with specifications, traceability, and the ability to ensure continuity and on-time delivery.

Today, another element must be added to this list: information security.

A component may be manufactured correctly, inspected and delivered on time, but the overall value of the supply also depends on the supplier’s ability to properly safeguard the documentation and data entrusted to it by the customer.

Cybersecurity is therefore no longer simply an “IT issue” separate from production. It has become part of the customer relationship, the trust built over time, and the ability to be regarded as a reliable partner within a complex supply chain.

For an SME such as LOMEC, investing in this area therefore means strengthening its credibility with customers and stakeholders operating in markets where information protection, business continuity and risk management are becoming increasingly important.

An achievement that marks the beginning of a new phase

Achieving Cyber Essentials represents the first visible milestone in a broader cybersecurity journey that LOMEC is continuing to pursue, with further objectives related to information security management, resilience and business continuity.

The work will therefore continue on both the technological side and the organisational and procedural side.

The direction is clear: to build an increasingly well-prepared company, capable of protecting itself while at the same time offering greater assurance to customers who entrust it with data, documentation and know-how.

For LOMEC, investing in cybersecurity today means becoming more resilient tomorrow.

And in the aerospace supply chain, where reliability and trust are an integral part of the value delivered, that matters.

Contact us for more informations!