Analysis of Security-Related Events in the Chemical and Process Industry

Abstract

Process facilities, in particular those where hazardous substances are processed or stored, may be the target of malicious acts aiming at interfering with the normal operations. The security threat to such industrial facilities includes both physical and cyber intrusions and it may arise both from outside the business organization managing the facility (i.e. outsider threat) or from inside (i.e. insider threat). In the present study a database of security-related events that affected the process industry and similar industrial sectors worldwide (Bioprocesses, Chemical&Petroleum, Energy production, Pipelines, Transportation, Water/Wastewater) was investigated. The database collects a total of 369 records. The data were analysed, focusing on time and geographical trends, threat actor, industrial sector affected, and final scenarios triggered by the security attacks. Overall, the results point out the concreteness of security-related events in process industry and frame a clearer picture of the threats and the scenarios triggered by intentional acts, providing useful information in the security risk assessments of process facilities.