MANUFACTURING HEAT TREAT

Cybersecurity Desk: NIST SP 800-171 Is Changing But Don’t Panic . . .

How can increased cybersecurity measures benefit today’s heat treaters and their clients? Find out more with an exploration of the coming changes in CUI and the way these changes could affect heat treating companies. 

Today’s read is a feature written by Joe Coleman, cybersecurity officer at Bluestreak Consulting™. This column was first released in Heat Treat Today’s September 2023 People of Heat Treat print edition.


Introduction

Joe Coleman
Cybersecurity Officer
Bluestreak Consulting™
Source: Bluestreak Consulting™

This 10th article in the series from Heat Treat Today’s Cybersecurity Desk will explain some of the changes that are being proposed in the IPD (Initial Public Draft) of NIST SP 800-171 Revision 3. On May 10, 2023, the National Institute of Standards and Technology (NIST) released a draft version of Rev. 3 for Special Publication (SP) 800-171, the foundational framework of requirements for protecting controlled unclassified information (CUI). The final version of NIST SP 800-171 Rev. 3 is expected to be released in early 2024.

Don’t panic about these proposed changes in Rev. 3. If you handle CUI and you are working towards your compliance, continue to implement Rev. 2. Don’t wait until Rev. 3 is fully released to start. Remember, DFARS mandates that if you are a DoD prime contractor or subcontractor with CUI, you need to be compliant with NIST 800-171 Rev. 2 as well as CMMC Level 2 or 3 certified. CMMC certification deadline is in 2025 and it’s fast approaching.

Modifications & Additions to Rev. 3

The changes in Rev. 3 should have a positive impact on your ongoing compliance management program. They simultaneously made the requirements easier to understand and implement while also preserving and even adding flexibility that allows companies to make risk-based decisions about their environments and the data managed in those environments. These include the merging, addition, removal,
and clarification of several different requirements. The most obvious difference is that the requirements went from 110 controls down to 109. This was because they had withdrawn 27 of the original controls (most are migrated into another existing control) and added 26 new requirements.

Categories of Changes

• 18 Controls with “No Significant Change”: Editorial changes to requirement; no change in outcome.
• 49 Controls with “Significant Change”: Additional detail in the requirement, including more comprehensive detail on foundational tasks for archiving the outcome of the requirement.
• 18 Controls with “Minor Changes”: Editorial changes. Limited changes in the level of detail and outcome of requirements.
• 26 Controls with “New Requirements”: Newly added requirement in IPD SP 800-171 Rev. 3.
• 27 Controls with “Withdrawn Requirements”: Requirement withdrawn.
• 53 Controls with “New Organization-Defined Parameter (ODP)”: New ODPs can apply to all change types with the exception of withdrawn requirements. Each requirement includes one or more new ODPs.

Chart with Cybersecurity Acronyms
Click on the Image for a full list of Cybersecurity Acronyms

Implications for Heat Treaters

What has not changed is that companies that handle CUI must comply with the NIST 800-171 cybersecurity standards. Failure to comply can result in significant consequences, including loss of contracts and damage to the company’s reputation. With the release of Rev. 3, heat treaters must ensure they are up to date with the latest security requirements. One of the most significant changes in Rev. 3 is the addition of new security requirements. Heat treating companies must review these new requirements and ensure they have implemented the necessary controls to meet them. Also, organizations must review the updated requirements to ensure they meet the latest best practices. The reorganization of the security requirements may also impact heat treaters. The alignment with the NIST Cybersecurity Framework provides a more comprehensive approach to security. However, some companies may need to adjust their current security programs to align with the new structure. By staying informed and implementing the necessary controls, heat treat organizations can ensure they are adequately protecting CUI and meeting their compliance obligations to their clients.

About the Author:

Joe Coleman is the cybersecurity officer at Bluestreak Consulting™, which is a division of Bluestreak | Bright AM™. Joe has over 35 years of diverse manufacturing and engineering experience. His background includes extensive training in cybersecurity, a career as a machinist, machining manager, and an early additive manufacturing (AM) pioneer. Contact Joe at joe.coleman@go-throughput.com.


Find heat treating products and services when you search on Heat Treat Buyers Guide.com


Cybersecurity Desk: NIST SP 800-171 Is Changing But Don’t Panic . . . Read More »

Cybersecurity Desk: Not Using 2FA or MFA? Your Data Is Not Secure

How can increased cybersecurity measures benefit today's heat treaters and their clients? Find out more with an exploration of 2FA and MFA!

Today's read is a feature written by Joe Coleman, cybersecurity officer at Bluestreak Consulting™. This column was first released in Heat Treat Today's August 2023 Automotive Heat Treat print edition.


Joe Coleman
Cybersecurity Officer
Bluestreak Consulting™
Source: Bluestreak Consulting™

Introduction

This 9th article in the series from Heat Treat Today’s Cybersecurity Desk will explain the significance of 2FA (2-Factor Authentication) and MFA (Multi Factor Authentication), their benefits, and how they can help secure your data and your clients’ data.

2FA and MFA have proven to be effective methods to enhance online security. And, if you provide any products or services to a DoD (Department of Defense) contractor, this is mandatory for all users accessing your computer systems and critical data. Implementing 2FA is a minimum requirement and is better than just a username/password combination. MFA takes your security to a whole new level.

What Is 2FA?

2FA adds an extra layer of security to the usual username/password combination. It requires users to provide a second authentication factor, typically something they possess, in addition to their password. Common examples include a one-time verification code sent via SMS, email, or generated by an authentication app like Google Authenticator or Authy. By requiring the combination of something known (password), along with something possessed (authentication factor), an additional level of security is provided.

What is MFA?

The strengths of Multi-Factor Authentication (MFA) take security a step further by incorporating multiple authentication factors beyond the customary two. These authentication factors can be categorized into three main types: something you know (password or PIN), something you have (smartphone or security token), and something you are (biometrics like fingerprints or facial recognition). MFA offers increased security as it requires multiple factors to be verified before granting access.

Is MFA Better than 2FA?

In terms of security, the more the better should be the correct mindset. MFA is a more secure method than 2FA, because a user must respond to more checkpoints, especially if authentication factors disperse through different access points that aren’t available online (like a token or security key) and require a physical presence. Proving user identity multiple times instead of just submitting items of proof twice (i.e., 2FA), lowers the chance of a breach and helps achieve security compliance requirements.

Implementing 2FA or MFA

Enabling 2FA and MFA is becoming a more and more accessible option across many platforms and services. The most popular websites, email providers, social media networks, and online banking institutions offer 2FA and/or MFA options. Users can typically find the necessary settings in their account security or privacy preferences. It is crucial to follow the provided instructions for setting up and managing these authentication methods properly. In an age where cyber threats are always rising, protecting our online presence is critical. 2FA and MFA have proven to be effective methods in safeguarding our digital lives. By implementing these extra layers of security, companies can enhance their defenses and protect their data and their clients’ data.

What About Your Outside Personnel Support?

Chart with Cybersecurity Acronyms
Click on the Image for a full list of Cybersecurity Acronyms

Many companies have outside vendor support, and maintenance personnel access their network and systems on a regular basis. For example, they may use VPN access that requires the user to “punch a hole” in the firewall, making it much more vulnerable to unauthorized access. Additionally, it is typically a configuration nightmare for your network and the IT folks to get it working properly.

There is a better way. Through much research and testing, we have found that BeyondTrust is a great tool to use to allow outside vendors secure access to the information they need to see without connecting to your network. It is currently used by 20,000+ organizations worldwide with much success and security. BeyondTrust also records their entire online session so you can see exactly what they accessed and did during the online session. Check out www.beyondtrust.com for more information.

About the Author:

Joe Coleman is the cybersecurity officer at Bluestreak Consulting™, which is a division of Bluestreak | Bright AM™. Joe has over 35 years of diverse manufacturing and engineering experience. His background includes extensive training in cybersecurity, a career as a machinist, machining manager, and an early additive manufacturing (AM) pioneer. Contact Joe at joe.coleman@go-throughput.com.


Find heat treating products and services when you search on Heat Treat Buyers Guide.com


Cybersecurity Desk: Not Using 2FA or MFA? Your Data Is Not Secure Read More »

Eco-Friendly Nitriding/Nitrocarburizing System for In-House Heat Treater

A leading component supplier to manufacturers of converting and CNC machinery, Reymak Makine As, has embarked on a journey to enhance manufacturing quality while reducing its environmental impact. This strategic move aims to internalize heat-treating operations and advance the sustainability tooling components.

Reymak Makine Aş has integrated an eco-friendly Nitrex nitriding/nitrocarburizing system into its facility in Manisa, Türkiye. The heat treater offers a diverse product range, including an array of converting tools and CNC components, ranging from friction shafts/rings to reel cones, core chucks, and safety chucks. These components play a  role in the packaging industry by ensuring alignment and tension of materials such as paper, film, foil, labels, textiles, and more. They prevent the occurrence of loose or soft rolls that could otherwise compromise product quality. Safety chucks, on the other hand, are specialized clamp devices designed for CNC and turning machinery, ensuring precision and accuracy in machining operations.

Recognizing the drawbacks of electroless nickel plating, Reymak sought to enhance the quality, efficiency, cost-effectiveness, and sustainability of its manufacturing operations. To achieve these objectives, the company selected a nitriding/nitrocarburizing system, specifically the compact model NXK-812, equipped with advanced process technologies. These technologies include Nitreg® controlled nitriding, Nitreg®-C controlled nitrocarburizing, and ONC® post-oxidation.

Utku Inan, Nitrex’s local representative in Türkiye, emphasized, “[This collaboration] demonstrates that by embracing sustainable innovations in its in-house heat treatment, Reymak is not only enhancing quality control but also streamlining logistics for faster lead times and cost savings – a genuine win-win scenario.”


Find heat treating products and services when you search on Heat Treat Buyers Guide.com


Eco-Friendly Nitriding/Nitrocarburizing System for In-House Heat Treater Read More »

Seeing Double: Digital Twins in the Heat Treat Industry

What is a digital twin, and how does it relate to the heat treating industry? As noted by Mike Löpke, "The quality of the product is the most important aspect," and such quality can be supported by a digital twin. 

This article is set to be published in Heat Treat Today's November 2023 Vacuum Heat Treat print edition. While awaiting the release of the November issue, catch up on previous digital editions here


By definition (see Grieves and Vickers, 2002), the digital twin is a virtual representation of a material or immaterial object of the real world that does not necessarily exist, for example, a representation for the design phase of a machine. As the concept of digital twins is universal, it can often be applied to almost everything: machines, tools, processes, human capital, production and products, quality key performance indicators (KPI),and much more. With design driven by use case*, digital twins deliver all required data, functionalities, and information primarily to accomplish a given task and to fulfill its use case-related purposes.

Contact us with your Reader Feedback!

Digital twins require at least these three important elements: an object in the real world, its digital representation, and their connecting information which is continuously updated in real time. The characteristics of this information are various and include all kinds of data sources (e.g., process data, master data, meta data, or enterprise resource planning data); additionally, algorithms and applications in general may help to enrich this information.

Digital twins can be part of the supply chain throughout the entire lifecycle of products, machines, processes, or services and offer different value and advantages at each stage. Already applied in the design phase, a digital twin can handle complex product requirements or fast cycles of development and test different designs with specific simulations to make physical prototyping more and more redundant. This results in time and cost savings in the development of new products and optimizes aggregates and processes already in the design phase. Simulating functionalities and behavior in respect to every relevant aspect lowers the degree of uncertainty. Since all functionalities can be simulated, commissioning is easier, and processes are free of error.

Another use case of digital twins is provided by their holistic view on data. This offers the possibility of monitoring and reducing risks which may lead, for example, to a rise in the overall availability of a machine or a process line. Robust prognoses regarding the properties, the quality, and the behavior of products and machines can be identified as well as replacement planning and investigations of upcycling potentials. The concept of the digital twin leads to a holistic view on products, machines, processes, and the entire supply chain in real-time. This makes communication between suppliers, producers, and customers easier since they share the same level of knowledge.

In the heat treatment industry, the most prominent and important use case is the digital passport of a product. Since a lot of parts, especially in defense or aerospace, need to meet special requirements and quality gates, a digital passport of these parts contains all the certificates paired with the material, process, and quality data. The advantages of such a passport are obvious: it provides all data in a universal and transparent way. There are official initiatives, for example, by the Institut für Werkstofforientierte Technologien in Germany, to create a common design and interface, and also to define mandatory information such a passport should offer. Currently, the driving aspect is carbon footprint and other ecological measures.

Besides the aspect of data and information, the digital data twin of a part can be enriched with suitable applications, such as process simulations and material calculations. Having a full picture of the current state of the part allows heat treaters to simulate different process routes to achieve given specifications or execute virtual stress tests and benchmarks. Additionally, when a process is disrupted or does not perform as expected, it is possible to adjust recipes for the parts involved. By measuring or simulating the state and conditions of those parts, new starting criteria for a rerun or continuation can be determined. This helps to reduce costs by avoiding downgrading or scrapping products.

Another prominent use case is the digital twins of assets (e.g., furnaces, probes, or other auxiliary tooling). Monitoring the asset health by gathering empirical and statistical information is a good starting point to enrich the virtual representation of an asset with empirical or machine learning-based models. This provides for asset health predictions which lead us to the concept of predictive and prescriptive maintenance.

The quality of the product is the most important aspect. The quality of a product is defined by the asset health and its state, the starting conditions and properties of a part, and (last but not least) the knowledge and execution of the process. And so, to apply and master the concept of digital twins for these three aspects will mean taking a huge step forward towards predictive quality.

*use case = a written description of how users will perform tasks on your website. It outlines, from a
user’s point of view, a system’s behavior as it responds to a request. (Source: Usability.gov)


About the Author:

Mike Löpke, the head of Software & Digitalization at Nitrex, has a background in Mathematics and Physics, as well as substantial knowledge in R&D and metallurgical modelling. With expertise in AI and process prediction, he has led Nitrex to develop the very first IIoT cloud-based platform (QMULUS) and is currently in charge of Nitrex’s Software and Digitalization department. His thirst for knowledge enables him to remain ahead of evolving technology.

For more information:
Contact Mike at Mike.Loepke@nitrex.com.


Find heat treating products and services when you search on Heat Treat Buyers Guide.com


Seeing Double: Digital Twins in the Heat Treat Industry Read More »

FPM Heat Treating Expecting New Vacuum Furnace

FPM Heat Treating has placed an order for a vacuum furnace. The HFL-7472-2IQ vacuum furnace features a graphite insulated hot zone of 48” x 48” x 72” with a 5,000 pound weight capacity, and the SolarVac® Polaris Controls.

The furnace from Solar Manufacturing is equipped with features for temperature control, uniformity, and rapid heating and cooling cycles, which are crucial for achieving superior metallurgical results. “We are thrilled to integrate this advanced vacuum furnace into our operations,” said Bob Ferry, VP of Engineering and Quality at FPM Heat Treating. “This acquisition is a testament to our unwavering commitment to excellence and our dedication to providing our clients with superior quality and precision in every project.”


Find heat treating products and services when you search on Heat Treat Buyers Guide.com


FPM Heat Treating Expecting New Vacuum Furnace Read More »

Bodycote Acquires Two North American Heat Treating Companies

Two new specialist technology focused businesses, Lake City Heat Treat and Stack Metallurgical Group, have been acquired by Bodycote.

Bodycote has agreed to acquire Lake City Heat Treat based in Warsaw, Indiana, a Medical market HIP and vacuum heat treatment business; and Stack Metallurgical Group based in the Pacific Northwest of the U.S., a key provider of HIP, heat treatment and metal finishing services.

The businesses are complementary to the commercial heat treater’s existing operations and will both expand its geographic footprint in North America and provide additional customer reach. Comprising of two HIP and three heat treatment sites, the businesses will be integrated into Bodycote’s existing specialist technologies business and aerospace, defense and energy classical heat treatment business respectively.

Stephen Harris, Group Chief Executive of Bodycote plc, commented, “These investments are an important and exciting enabler of our strategy to further enhance and grow our Specialist Technologies businesses. In addition, they will also expand our footprint in Aerospace and Medical heat treatment on the West Coast and in Indiana in the U.S."

The heat treater also announced plans to open a new HIP plant utilizing one of their existing sites in greater Los Angeles. The capacity is intended to support the rapid growth in space and civil aviation markets in the Los Angeles area.

The combined gross consideration for the acquisitions is 119 million pounds ($145 million) on a cash and debt free basis. The net economic consideration is approximately 106 million pounds ($130 million).


Find heat treating products and services when you search on Heat Treat Buyers Guide.com


Bodycote Acquires Two North American Heat Treating Companies Read More »

Settling in for the Season with Sustainability Suggestions

As we get further into the heart of fall, it’s time to turn up the heat (treat)! – but how can this be done in an optimized and sustainable way?

Today’s Technical Tuesday original content round-up features tips and tricks from our summer print editions on how to optimize and sustain your heat treat operations, even during the chilly months. So, bundle up, grab a hot drink, and review these insightful pieces!


Sustainability Insights Corner 

In May, Heat Treat Today began publishing "Sustainability Insights" from the IHEA editorial team. Here's a brief overview of the recent insights all in one place:

May: New Sustainability & Decarbonization Initiatives for Heat Treat. Learn from industry-leader Brian Kelly about the stages of getting started with suitability and planning for the future of the industry.

June: NEW Sustainability and Carbonization Webinar Series. Although this year's IHEA Webinar series may have come and gone, it's not too late to establish a foundational understanding of carbon and sustainability here!

August: Reducing the Carbon Footprint of Your Heat Treating Operations. Brian Kelly of Rockford Combustion is back with yet another suitability insight, here exploring ways to assess your heat treating operation's carbon footprint, tune your combustion systems, explore renewable fuels, and much more.

September: Process Heating and the Energy-Carbon Connection. Explore the issue of greenhouse gases and how recent conversations are affecting the heat treating industry with Michael Stowe of Advanced Energy.

In Case You Missed the May Issue: Induction and Sustainability Tips  

Looking for sustainability tips for your heat treating operation, but lacking in time? Heat Treat Today's May Issue has you covered with a quick read: "13 Induction and Sustainability Tips." We'll highlight a few below which made it into a recent Technical Tuesday feature:

Induction and Sustainability Tips Part 1: Cleaning and Maintenance

Induction and Sustainability Tips Part 2: Efficient Power

Induction and Sustainability Tips Part 3: Combustion

Induction and Sustainability Tips Part 4: Vacuum Furnace and Heat Treat Energy Savings

Sustainable Energy for Furnaces? What does the Future Hold? 

What will the future run on? With growing discontent around current energy sources like natural gas and other fossil fuels, power sources for furnace equipment are due for a makeover.

Explore the question of sustainable energy for furnaces in the future with industry experts John Clarke of Helios Electric, Philippe Kerbois of Glass, various authors from Watlow, and Stuart Hakes of F.I.C. (UK) Limited.

Read the article by Heat Treat Today's Editorial Team: Energizing the Future of Furnaces - 4 Perspectives.

Saving Power and Dollars in Vacuum Processing 

How much electrical power is being used in the typical heat treatment plant? And how can power (and money) be saved in these operations? If these questions peak your interest, explore further with Roger A. Jones and William Jones of Solar Atmospheres.

Learn about savings in electricity and money in areas of electric motors, high vacuum diffusion pumps, gas blowers, building lighting, AC/heating, and more in this article.

Read the article, "Conserve Electric Power and Save Dollars in Vacuum Processing" here!


Find heat treating products and services when you search on Heat Treat Buyers Guide.com


Settling in for the Season with Sustainability Suggestions Read More »

Press Supplied to Lingchuang Special Material Co. 

A supersized cold isostatic press from an HIP supplier with North American locations will be supplied for Lingchuang Special Material Co. to domestically produce isostatic graphite.

Quintus Technologies will be supplying a press model QIC 2.4 x 4.5 - 2000 to maximize operation and output capabilities. The press itself is setting new standards along with a new energy management system that offers energy savings of more than 30 percent compared to conventional intensifier solutions.

The cold isostatic press
Source: Quintus

Noted Lingchuang's vice president, Zhongxin Zhao, "In order to ensure the stability and consistency of product quality that reaches the international level, we have adopted the most advanced technology that has been proved in production at home and abroad. . . .Our key equipment is mainly imported, and the production process has reached a high degree of automation, stability, and environmental protection."

Lingchuang's CIP will be equipped with a new, first-of-its-kind feature: a redesigned pressure vessel that is floating during pressurizing, extending the life of the guide rail system and ensuring operation over a very long period of time.

"Lingchuang is a young company with a far-ranging outlook," comments Jan Söderström, CEO of Quintus Technologies. "Its founders saw opportunity in the shortage of domestic high-end specialty graphite materials."


Find heat treating products and services when you search on Heat Treat Buyers Guide.com


Press Supplied to Lingchuang Special Material Co.  Read More »

Anatomy of a Combustion System

Consider the numerous systems in your heat treat operations. What makes up the anatomy of each furnace? In this “Anatomy of a...” series, industry experts indicate the main features of a specific heat treat system. In this feature, Rockford Combustion compares two types of low-temperature combustion systems: standard nozzle mix and pre-mix combustion. As Bob describes, “low temperature” is defined as being “below the auto-ignition threshold,” which varies around 1200°F.

Contact us with your Reader Feedback!

The mark-ups for these reference images are provided by Robert (Bob) Sanderson, director of Business Development at Rockford Combustion.

Download the full graphics by clicking the images below.

 

This Technical Tuesday article is drawn from Heat Treat Today's August Automotive print edition.

Search www.heattreatbuyersguide.com for a list of combustion system providers to the North American market. If you are a combustion system supplier and not listed here, please let us know at editor@heattreattoday.com

This series will continue in subsequent editions of Heat Treat Today's print publications. Stay tuned!


Find heat treating products and services when you search on Heat Treat Buyers Guide.com


Anatomy of a Combustion System Read More »

New Furnace Hits the Road To Heat Treat Steel Bar Stock

A mesh belt temper furnace has been shipped to a manufacturer in the U.S. South. The client will use this heat treat furnace for preheating and tempering steel bar stock.

Mesh belt temper furnace packed and shipped
(Source: Premier Furnace Specialists. Inc./BeaverMatic)
Steve Ignash
Sales Engineer
Premier Furnace Specialists, Inc./BeaverMatic
Source: Premier Furnace/BeaverMatic

"We had built the client a similar furnace in 2022," commented Steve Ignash, sales engineer at Premier Furnace Specialists, Inc./BeaverMatic. "Our furnace gave them the confidence to purchase five more of the similar style to replace outdated equipment and add to their current increase in production."

The remaining four furnaces from the recent purchase will be completed and installed through January 2024.


Find heat treating products and services when you search on Heat Treat Buyers Guide.com


New Furnace Hits the Road To Heat Treat Steel Bar Stock Read More »