Blog

Cyber Protection in the Oil & Gas Industry

Posted on | Posted in Blog

Cyber protection in midstream oil & gas, SCADA seems like too esoteric to engage interest of industry outsiders. However, if the spill, explosion or gaseous release are big enough – that focus will change.

SCADA is the system of sensors that measure and control the flows of natural gas and crude oil produced in thousands of oil & gas wells around the nation. They are digital, computer controlled, and widely accessible to a moderately capable hacker.

Disable a level sensor and a tank overflows. Spoof a flow meter input and the computer opens a valve. Over-speeding a compressor risks an electrical failure, spark and explosion.

In a recent study from the Ponemon Institute – The State of Cybersecurity in the Oil & Gas Industry: United States it was reported that, on average, 46 percent of cyber attacks are believed by respondents to go undetected, and nearly 70 percent of oil and gas companies were hacked in the past year.

Every operator has to deal with tens of thousands of these systems and sub-systems. Most have no specific records of what equipment exists, how it’s configured or how it’s secured. Sure, they run OK – but that’s not the concern. So does your PC and smartphone. The difference is your PC and smartphone have passwords, filters and firewalls. This is not the case with most of those producing wells, gathering systems and pipeline sections.

It’s a HUGE task to protect these systems and the only way to start is to establish a cyber protection program that mirrors the safety program. Safety is culturally ingrained in oil & gas operations. It’s a system that works and can be successfully modeled to accommodate cyber protection issues.

Leave a Reply

Your email address will not be published. Required fields are marked *

Latest Posts
16 Aug 2017
Share

ABB e GlobaLogix associam-se para oferecerem SCADAvantage na cloud para empresas de gás e petróleo

O grupo ABB, líder mundial de tecnologias de energia e automação, anunciou hoje uma parceria com a empresa GlobaLogix para o fornecimento de uma nova solução SCADA disponibilizada como Software-as-a-Service (SaaS) e baseada no produto SCADAvantage da ABB. A parceria tem como objectivo oferecer um serviço SCADA robusto e aberto que permita reduzir não só[…..]

Latest Posts
08 Aug 2017
Share

Cyber Protection in the Oil & Gas Industry

Cyber protection in midstream oil & gas, SCADA seems like too esoteric to engage interest of industry outsiders. However, if the spill, explosion or gaseous release are big enough – that focus will change. SCADA is the system of sensors that measure and control the flows of natural gas and crude oil produced in thousands of[…..]

Latest Posts
20 Jul 2017
Share

Perfecting the Interview – A Waste of Time

On the one hand we all agree that the one ingredient for a successful candidate is fit. Does this person fit inside our culture? Can they do business our way? Can they represent us? Can they get along with all our folks? So what do we do? We scan resumes in a flimsy attempt to[…..]

Latest Posts
06 Jul 2017
Share

Get Along? Or, Get It Done?

Without exception, projects in any company will touch multiple stakeholders, departments and individuals. The changes required will invariably touch operations, engineering and procurement, just to name the basics. Projects make and break budgets. They also make and break careers. Getting a project done requires leadership that does not care about social standing within the organization.[…..]

Latest Posts
15 Jun 2017
Share

Meaningless Outcome Defined Planning

Can we quit the obnoxious and meaningless characterization of desired results masquerading as an action plan? Think about how often a leader, when asked for plan details, replies with some description of a favorable outcome without ever describing how that might come about. If you can’t remember one, just google about any political press conference.[…..]