The Mud King
中文

One security platform for 170+ regulations170 regulations, one platform, no drama

A single platform covering IT security, OT/ICS protection and AI security governance for operations in 60+ countries, with jurisdiction-specific requirements automated.Every regulator wanted something slightly different. Now one platform works out the differences.

Organisation
Global industrial machinery group
Role
Global Head of AI Enablement and Transformation · CDO APAC
Period
2024 – present
Setting
Information security and compliance

What changed

  • regulations and certifications on one platform
  • countries covered
  • compliance overhead
  • major regulatory findings, including NERC CIP audits

The brief

Secure IT, OT and AI for operations in more than 60 countries, under overlapping regimes from PIPL and MLPS 2.0 to GDPR, NIS2, the EU AI Act and NERC CIP, each with its own controls and evidence.

What was done

  • Built a single Global Infosec Platform spanning IT security, OT/ICS protection in converged plants, and AI-driven security governance.
  • Automated the jurisdiction-specific deltas across 170+ regulations and certifications, including PIPL and CSL, MLPS 2.0, GDPR, NIS2, DORA, the EU AI Act, U.S. state laws, LGPD, the DPDP Act and NERC CIP.
  • Aligned controls to NIST CSF 2.0, IEC 62443, ISO 27001:2022 and the NIST AI RMF.

Scope

  • NIST CSF 2.0
  • IEC 62443
  • ISO 27001:2022
  • NIST AI RMF
  • PIPL / GDPR / NIS2

Treating compliance as one platform with local deltas, rather than sixty local projects, is what made the overhead fall.