Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Small Manufacturer Cyber topic
No spam. Unsubscribe anytime.
Small Michigan manufacturer recounts cyberattack and warns certification costs could push firms from defense supply chain
Summary
Karen Arondowski, owner of IF Metal Works, recounted a March cybersecurity intrusion that compromised banking and Social Security data; she described estimated certification and physical-security costs near $190,000 and urged expansion of grant help to keep small firms in the defense supply chain.
Lansing — Karen Arondowski, owner of IF Metal Works in Roseville, appeared before the House Communications and Technology Committee on May 20 and described a recent cybersecurity intrusion that compromised her business accounts and personal information and underscored the financial burden of meeting Department of Defense cybersecurity requirements.
Arondowski told the committee that attackers accessed her Comcast account and changed passwords, and that two banks contacted her after suspicious activity: "They had my full Social Security number," she said. The breach prompted her to contact a congressional office, which directed her to a managed‑service provider; the firm responded quickly and helped secure her systems.
Arondowski described the costs of full compliance for a small manufacturer doing classified or controlled‑information work. "The cost for doing that, I'm looking at about a hundred and $90,000," she said, referring to required cameras and other physical and cyber security measures. She said that level of spending would meaningfully affect a small firm's margins and that managed‑service provider (MSP) costs could more than double once certification requirements are implemented.
Why it matters: Arondowski makes parts for automotive and defense customers and said losing access to DoD contracts would be consequential for her business and for the local supplier base. She described IF Metal Works as a 35,000‑square‑foot facility seeking a larger site to expand production and handle more classified work, and she said the firm signs nondisclosure agreements with student workers and staff because of the sensitive nature of some projects.
Arondowski urged expanded grant support and said the existing CyberSmart grant program would be helpful but that many small firms need additional assistance to afford remediation and physical-security upgrades. "I don't wanna say no to getting the certification. I wanna get it done. I'm just hoping that it can become somehow more affordable for a small business," she said.
Ending: Committee members expressed sympathy and concern about scams and cybercrime; several members said they would look for ways to support small firms. Arondowski offered to work with the committee and state programs to help other small manufacturers adapt.
