The COO doesn't think in firewalls and passwords. The COO thinks in trucks, shifts, and service levels. So if you want ten minutes of real attention, speak that language.
Start with the stories. A grocery distributor that expected to lose $350 to $400 million in sales.2 A retailer that ran on manual workarounds for weeks and expected to lose about £300 million in profit.4 A carmaker that stopped building cars for about five weeks, in an attack an independent group says cost the UK economy about £1.9 billion.5
Then bring it home. Ask the COO what one day of downtime in your busiest building would cost. Missed shipments. Trucks waiting at the gate. Workers standing idle. Food or medicine that spoils. Penalties in customer contracts. The customer who quietly moves to a competitor. Many COOs can answer that faster than their security team can.
Now show what you'd measure, in three levels, and be clear about which is which.
Level one is what you found. Hard facts from your own building. How many connected devices nobody had on a list. How many still had factory passwords. How many could reach the systems that run your orders. How many attack paths you closed, with proof they stayed closed.
Level two is the time you saved. How many hours your team used to spend hunting for devices, chasing vendors, or checking alerts by hand, and how many it takes now. Multiply by what those people actually cost.
Level three is the downtime you avoided. This one is an estimate, so say so. Show your assumptions and let the COO challenge them. Being honest about this number is what makes the first two believable.
Then make one small, clear ask.
Findavi Operational Blind Spot Assessment
A scoped, on-site assessment of connected devices, exposed paths, accountable owners, and supported response options.
Don't start with the whole company. Start with one place. One warehouse, distribution center, camera fleet, RF environment, or cold-storage zone. Pick the spot that worries you most.
We ship you a small box with Findavi already loaded. It plugs into a monitoring port, listens without touching anything, and keeps your data on your own network.
You get a report you can act on: every connected device we found, the paths an attacker could use, who owns each problem, what to fix first ranked by impact on the operation, the safe ways to fix it, and what the security check and the service check will each confirm.
That's it. One site, real evidence, and a plan your operations team can live with.
Questions for your team
Which single building would hurt most if it stopped for a day? That's your first site.