Good morning, Aalborg Portland.
Your IT, OT, sustainability and compliance posture — in one live view. Built around the regulatory and operational realities of cement manufacturing.
Maturity Trend (last 8 quarters)
Cement-industry benchmark: 2.9. Two domains lift the average, OT and Compliance pull it down.
Live Activity Feed
Domain Maturity
IT Operational Reliability
Industry-Specific Snapshot
Kiln SCADA
OT/IT Segmentation
CO₂ / ton cement
EU ETS allowances
Datacentre Network Throughput
System Load
Live Security Events
Live System Events
Backup & Recovery
Backup Job Status
Service Desk & SLA
Top 5 Tickets — Oldest Open
Service Availability (30 days)
Patch & Compliance
Certificates Expiring
Identity Health
Capacity & Cost
Operational Technology (OT/ICS)
Rørdal Plant
Cement Mill SCADA
Quarry Telemetry
Kiln Control
OT environment monitored via Claroty / Nozomi sensors mirrored to ITM8 SOC. Plant networks remain isolated; only one-way telemetry leaves OT segments.
Physical & Facility Resilience
UPS / Battery
Cooling redundancy
Fire suppression
Datacentre access
Cabling docs
Hardware EOL
Telephony / Teams Voice
Print fleet
The bread-and-butter dimensions of IT operations — the part nobody mentions until it fails. ITM8 monitors UPS state, cooling redundancy, physical access logs and hardware EOL via existing facility integrations.
Risk Heatmap
Likelihood × Impact
Industry Threat Pulse
last 90 days
halt per incident
or stolen credential
Sources: CFCS, ENISA, Computerworld DK · refreshed quarterly
Top Security Risks
Recent Security Events
Compliance Posture · Cement & Heavy Industry
Aalborg Portland is subject to multiple overlapping frameworks. Each card shows readiness, evidence collected, and the next concrete deadline.
Cyber Insurance Posture
Vendor & Partner Management
Why This Matters for Aalborg Portland
As a cement producer, Aalborg Portland sits at the intersection of three regulatory pressures: heavy environmental regulation (EU ETS, CBAM, IED, ISO 14001, CSRD), critical infrastructure cyber rules (NIS2), and group-level reporting from Cementir Holding. The dashboard automatically maps each control to the framework it supports, so a single piece of evidence (e.g. an MFA rollout) can satisfy NIS2, ISO 27001 and the cyber-insurance underwriter at the same time.
CO₂ Reduction Roadmap
Target: -30% by 2030, net-zero by 2050. Carbon capture project (C2CC at Rørdal) on track for 2030 commissioning.
ESG Data Pipeline
CSRD Disclosure Readiness
Aalborg Portland is in scope via Cementir Holding (listed parent, large undertaking). First full report covers FY2026, due April 2027.
Cement industry: 2.9
Top quartile: 3.7
Domain Maturity — Click to Expand
Extended Insights · Cement Industry Cut
This is the dashboard summary — the full assessment includes 7 domains, 40+ sub-areas, raw findings and evidence per control.
📄 Open Full Maturity ReportThe Ask
Approve Option B — Phased Plan at DKK 4.8M over 24 months, starting Q3 2026. Decision needed by 30 June 2026 to align with the cyber-insurance renewal and the NIS2 first-audit window.
If We Do Nothing
Renewal requires EDR + MFA. Premium +25% or refused.
Essential entity. Board carries personal liability.
1 in 4 unprotected industrial sites hit per year. 4-5 days halt.
Audit findings + SLA penalties. DKK 12-25M total exposure.
Investment Options
Option A — Defer
- DKK 12–25M ransomware exposure
- Personal liability under NIS2
- Insurance non-renewal risk
- OT segment unprotected
Option B — Phased Plan
- EDR across IT + OT
- NIS2 essential-entity ready
- Cyber insurance qualifies
- Score 2.6 → 4.0
Option C — Accelerated
- Closed within one year
- High peak load on internal IT
- Best fit if M&A pending
- Score 2.6 → 4.2
Business Benefits
Board KPIs · Tracked Quarterly
Quick Wins · Free or Almost Free
Already in your M365 license. Blocks 99.9% of identity attacks. Less than one week to roll out.
DKK 0 extra14 recommendations from Microsoft can be enabled immediately, no new licenses needed.
DKK 0 extraUse existing Fortinet gear to fully isolate plant networks. Stops malware spread to production.
Existing gearAI & Automation Opportunity
Where Aalborg Portland sits today
Strong M365 + Azure foundation, but most automation today is manual or scripted. With the security base in place (Option B), three concrete AI use cases ship within 6 months — cement-industry specific.
Automate monthly close commentary, ESG narratives and board-pack drafting.
Ship in 60 daysAI on plant historian data spots unusual readings before they cause downtime. Pilot one line.
Pilot 6 mo.AI extracts and books supplier invoices into Dynamics 365. Cuts manual entry ~70%.
Ship in 90 daysFor the full board-level walkthrough including risk heatmap, cost-of-inaction, cyber insurance posture, and full domain detail:
📄 Open Full Board ReportConnected Data Sources
All numbers in this dashboard come from real telemetry — not consultant guesses. ITM8 Insights connects to your existing systems via read-only collectors.
~62% of findings in this report were collected automatically from your tenant before the first consultant interview. The remaining 38% comes from structured workshops — never raw guesswork.
🔒 All connectors are read-only and use service principals scoped to telemetry-only API permissions. No production data leaves Aalborg Portland's tenant.