Oil and gas might not seem like an industry that hackers would target. But they do—and the cybersecurity risks rise with every new data-based link between rigs, refineries, and headquarters. In an increasingly connected world, how can upstream oil and gas companies protect themselves?
Introduction: Risks—and Stakes—Keep Rising
For years, cyberattackers have targeted crude oil and natural gas companies, with attacks growing in frequency, sophistication, and impact as the industry employs ever-more-connected technology. But the industry’s cyber maturity is relatively low, and oil and gas boards show generally limited strategic appreciation of cyber issues.
Why is this so? Perhaps because the industry—engaged in exploration, development, and production of crude oil and natural gas—may simply feel like an unlikely target for cyberattacks. The business is about barrels, not bytes. In addition, the industry’s remote operations and complex data structure provide a natural defense. But with motives of hackers fast evolving—from cyberterrorism to industry espionage to disrupting operations to stealing field data—and companies increasingly basing daily operations on connected technology, risks are rising fast, along with the stakes.
Different areas of the oil and gas business, naturally, carry different levels of risk and demand different strategies. A previous article, "An Integrated Approach To Combat Cyberrisk: Securing Industrial Operations in Oil and Gas," looked at cyberrisks and the governance process at an overall oil and gas industry level; this follow-up explores the upstream value chain of the oil and gas industry (exploration, development, and production) to assess each operation’s cyber vulnerability and outline risk mitigation strategies.
Among the upstream operations, development drilling and production have the highest cyber risk profiles; while seismic imaging has a relatively lower risk profile, the growing business need to digitize, e-store, and feed seismic data into other disciplines could raise its risk profile in the future. A holistic risk-management program that is secure, vigilant, and resilient could not only mitigate cyber risks for the most vulnerable operations but also enable all three of an upstream company’s operational imperatives: safety of people, reliability of operations, and creation of new value.
Read the full story here.
Don't miss our latest HSE content, delivered to your inbox twice monthly. Sign up for the HSE Now newsletter. If you are not logged in, you will receive a confirmation email that you will need to click on to confirm you want to receive the newsletter.
9 - 11 Mar 2020
- Muscat, Oman
Shaping the Future of the Energy Industry.
17 Mar 2020
- Calgary, Alberta, Canada
In this course, discover the field applications of machine learning with a focus on reservoir characterization, production analysis and prediction, and recovery enhancement.
22 Apr 2020
- Bergen, Norway
The SPE Norway Subsurface Conference brings together the E&P industry to expand industry technical knowledge, connect with innovators and leaders and address technical challenges facing upstream oil and gas professionals.
29 - 30 Apr 2020
- Brisbane, Australia
We are in the throes of an energy transition - our energy system is evolving rapidly and diversifying, decarbonising and decentralising.
19 - 20 Feb 2020
- Lafayette, Louisiana, USA
Covering issues related to the identification, prevention, and remediation of formation damage
29 Jan 2020 22:30 GMT
- Live, then On Demand
HSE Now is a source for news and technical information affecting the health, safety, security, environment, and social responsibility discipline of the upstream oil and gas industry.
©2003-2020 Society of Petroleum Engineers, All Rights Reserved.