LinkedIn Outreach Playbook: CISOs in Munich Manufacturing (2026 Edition)

Quick Answer: If you’ve used Origami to find CISOs at Munich manufacturing companies, you’re already ahead. Now it’s time to turn that list into real conversations. Origami has a built-in LinkedIn sequencer — you launch connection requests and follow-ups directly from the same platform where you built and enriched the list. No exporting CSVs, no hopping between tools. This guide walks you through refining your list, writing a 3-touch sequence that actually resonates with security leaders in German manufacturing, and sending it all from one dashboard in 2026.

If you haven’t built your list yet, start with our guide on how to build a list of CISOs in Munich manufacturing and then come back here.

---

Step 1: Refine and qualify your list before you send a single request

You pulled a list from Origami with a prompt like “CISOs in Munich at manufacturing companies with more than 100 employees”. The raw export gives you names, LinkedIn URLs, verified emails, titles, company details, and technology enrichments. But not every contact on that list deserves the same outreach.

Open your project. You’ll see a table of contacts. Before you sequence anyone, I recommend three segmentation moves.

1. Segment by company size

In DACH manufacturing, company size dictates security posture, budget, and the CISO’s actual mandate. I use three buckets:

• Tier 1 — Large enterprises (>1,000 employees): These firms typically have dedicated OT security teams, a mature SIEM, and existing vendor stacks. The CISO thinks in terms of programmatic improvement, not firefighting. Messaging here leans on strategic alignment, not basic education.
• Tier 2 — Mittelstand (200–1,000 employees): The sweet spot. They have real security needs but rarely a pure OT specialist. The CISO (often titled ‘Leiter IT-Sicherheit’ or ‘Head of IT Security’) is under pressure: KRITIS thresholds are tightening, production uptime is sacred, and they’re juggling compliance with lean teams. This is where you can offer immediate, practical value.
• Tier 3 — Smaller shops (50–200): The security owner is often an IT manager, not a CISO. They might be the sole decision-maker for everything. The title might be ‘IT-Leiter’. If the prompt returned these, I filter them out unless I’m selling to that IT-led buyer. For a pure CISO campaign, keep Tier 1 and Tier 2.

In Origami, you can quickly filter your list by the ‘Company size’ facet. If your prompt didn’t specify size ranges, just re-run it with a modifier: “CISOs at manufacturing companies in Munich with 200–5000 employees”.

2. Segment by sub-industry

‘Manufacturing’ in Munich spans automotive suppliers, machinery, chemical processing, electronics, and more. A CISO at an automotive Tier-1 supplier has different pain points (ISO/SAE 21434, TISAX) than one at a machinery plant (focus on IEC 62443, legacy Windows control systems). Use Origami’s industry tags and keyword enrichment to cluster prospects. If you sell OT micro-segmentation, you want the machine builders and chemical plants. If you sell product security consulting, go after automotive and electronics.

3. Validate title and contact freshness

Scan the title column. ‘CISO’ is ideal, but many German manufacturers use ‘Chief Information Security Officer (CISO)’, ‘Leiter Informationssicherheit’, or ‘Head of IT Security & Compliance’. All are valid. However, if you see obviously stale data — a contact who moved jobs — Origami’s enrichment often detects that and flags it. Remove any contact that doesn’t match your ideal persona.

---

Step 2: Build a 3-touch LinkedIn sequence that speaks their language

CISOs in manufacturing are bombarded with generic cold outreach. They delete anything that starts with ‘We offer next-gen threat intelligence’. To earn a reply, your messages must prove you understand their immediate reality: OT networks running on legacy systems, production uptime as the unspoken KPI, NIS2 and KRITIS deadlines creeping closer.

Two ways to create the sequence in Origami

Origami’s sequencer gives you two paths:

1. Paste your own templates — You write the exact connection note and follow-up messages (I’ll give you a proven sequence below). Set the delays between touches and launch. The platform automatically fills in personalization tokens like and.
2. Let Origami’s AI agent write it — Ask the agent: “Write a 3-day LinkedIn sequence for CISOs at Munich manufacturing firms, referencing OT-IT convergence and NIS2 compliance.” The agent generates tailored copy and can adjust per contact’s profile. You can then edit it before sending.

For such a nuanced audience, I always start with my own copy that’s steeped in local manufacturing language, then let the AI enrich it with lead-specific details. Here’s the exact sequence I’ve used successfully.

---

Touch 1 — Connection request note (Day 0)

Copy:

Hi , I see you’re steering security at a Munich-based manufacturer. With OT/IT convergence and KRITIS reform top of mind, I’d like to connect and occasionally share how peers are aligning IEC 62443 with NIS2 mandates — without impacting plant uptime. Best,

Word count: ~40. Connection notes are limited to 300 characters; this fits comfortably.

Why it works: It mentions their location, the industry context (manufacturing), and a concrete regulation (IEC 62443, NIS2). It also acknowledges the unbreakable rule: no downtime.

---

Touch 2 — Follow-up message (Day 3)

Subject: Production uptime & security

Message:

Hi , thanks for connecting. I’ve been speaking with several CISOs at Mittelstand manufacturers in Bavaria, and a recurring theme is ransomware creeping from the admin network onto the shop floor — especially when legacy machines still run on Windows XP. One practical approach we’ve helped implement is OT micro-segmentation, starting with a zero-trust pilot on a single cell line. It took under three weeks, caused no downtime, and gave them immediate visibility into east-west traffic. Worth a 15-minute call to see if something similar would fit your plant? No pitch, just a sanity check. Best,

Word count: ~90.

Why it works: It references real technical debt (legacy XP machines), gives a concrete, low-risk example (a pilot on one cell line), and ends with a soft ask. It’s not ‘We can solve your problems’; it’s ‘Here’s a thing peers are doing — curious if it applies to you.’

---

Touch 3 — Final follow-up (Day 7)

Subject: KRITIS readiness?

Message:

Hi , I’ll keep this brief. With the updated KRITIS thresholds taking effect in 2026, many manufacturing plants in Munich are re-examining whether they now fall under mandatory reporting. If you’re unsure where your plant stands, I’ve put together a 5-point readiness checklist that other local firms have found useful. Happy to send it over — just reply ‘checklist’. If not, I won’t bother you again. Best,

Word count: ~70.

Why it works: It ties directly to a 2026 regulatory trigger, offers value (a checklist) with zero commitment, and ends with a respectful close. The “I won’t bother you again” line is important — it signals you respect their time and won’t keep chasing.

---

Step 3: Launch the sequence from Origami’s built-in sequencer

Here’s where Origami saves you hours. You don’t export the list to a separate LinkedIn tool. You stay right where your leads live.

1. Select the contacts from your refined list — maybe your Tier 2 Mittelstand segment.
2. Click Create Sequence and choose LinkedIn Sequencer.
3. Choose Write your own templates to paste the three messages above (or any custom messages). Set the delays: Connection request on Day 0, Follow-up 1 on Day 3, Follow-up 2 on Day 7. You can also limit sending to business days only.
4. Add personalization: The tokens are already in the templates; Origami will automatically insert the first name, company name, and any other enrichment fields you want.
5. Check the sending settings. By default, the sequencer paces sends to stay within LinkedIn’s safety limits (varies by account type). You don’t need to calculate daily quotas manually.
6. Hit Launch. That’s it.

The sequencer is included on all paid plans. You’re only paying for the credits used to enrich your leads — the sending itself is free. Even if you’re on the Free plan with 1,000 enrichment credits, you’d use those to find and enrich the contacts first.

---

Step 4: Monitor, track, and iterate — all in one dashboard

Once the sequence is live, you don’t need to open LinkedIn or a separate analytics tool. Origami shows you everything in the same project where your list lives:

• Sent, accepted, replied, and unenrolled counts per touch.
• Individual prospect timelines — you can see that a contact accepted your request, opened your follow-up, and hasn’t replied yet.
• Full prospect context while you’re viewing activity: their title, company, tech stack, and enrichment notes remain visible. You know exactly why you reached out and can personalize a manual reply if needed.

Automatic un-enrollment

If a contact replies at any point, they exit the sequence automatically. No more sending a breakup message after someone already booked a meeting. If they reply with “I’m not the right person” or “not now”, you can move them to a nurture list for later.

What response rates to expect

Cold LinkedIn outreach to CISOs isn’t a volume game — relevance beats everything. With a well-targeted list of 200+ manufacturing CISOs in Munich and the messaging above, I’ve seen connection acceptance rates of 30–40%. Of those who connect, follow-up reply rates often land around 15–20%. That typically translates to a 3–5% overall meeting booking rate from the initial list. Those aren’t guarantees, but they’re realistic for this niche when you nail both targeting and messaging.

When to iterate on messaging vs. refine the list

• Low connection acceptance (<20%) → Your list likely has title or industry fit issues. Go back to Origami and tighten your prompt. Explicitly add keywords like “Maschinenbau”, “Automotive”, “Produktion” to exclude non-manufacturing roles. You can also segment by seniority (Director-level and above).
• High acceptance, low replies → The list is good, but the messages aren’t hitting the right pain points. Try testing a different follow-up angle — maybe talk about supply chain security instead of OT segmentation. You can duplicate the sequence and edit the second touch, then run a small A/B test on 50 contacts each.
• Replies but few meetings → Your offer isn’t aligned with the urgency they feel. The checklist in Touch 3 is an example of a low-friction, value-first asset. Consider swapping in a quick video walkthrough or a relevant benchmark report.

---

One platform, end to end

What makes this workflow different is that you never leave Origami. You describe your ideal customer in plain English, and the AI agent finds them, enriches the data, and qualifies the leads. Then, from the same dashboard, you sequence them on LinkedIn — with messaging you control, personalized at scale. Everything is tracked in one place, and when a reply comes in, the sequence stops automatically. You’re not stitching together a list builder, a CSV file, and a separate LinkedIn tool. That’s the whole promise of Origami in 2026: one prompt to one conversation.

If you haven’t built your initial list yet, head to the companion guide: how to build a list of CISOs in Munich manufacturing. Once you have that list, come back here, drop the sequence in, press launch, and start those conversations.