Perspectives on Cyber Security for Offshore Oil and Gas Assets

Abstract

In an ever-evolving technological industry, the oil and gas sector is already moving forward through the adaptation of Industry 4.0 and the adaptation of advanced cyber technologies through Oil and Gas 4.0. As IT/OT (information technology/operational technology) systems are evolving technologically, so are the cyber security threats faced by the offshore oil and gas assets. This paper aims to raise the awareness of cyber security threats and the organizational and technical measures that need to be adopted by the oil and gas industry for remote and complex assets in the upstream sector. A comprehensive literature review covering the areas of new IT/OT systems integration and cyber security risk analysis and management is presented. The results of a survey on the subject of cyber security for offshore oil and gas assets are also presented, and they provide valuable insight into the current industry culture and the perception of cyber security concepts. The importance of organizational culture, personnel training and involvement, as well as corporate engagement and support in the subject of cyber security is highlighted.

Study the Effectiveness of ISO 27001 to Mitigate the Cyber Security Threats in the Egyptian Downstream Oil and Gas Industry

“…This worm hijacks critical infrastructure systems worldwide by utilizing compromised USB thumb drives to infect Microsoft Windows platforms so that it can gain control of the infected systems. In consonance with [14] survey, the lack of end-user cybersecurity awareness is a significant threat to cybersecurity. Top management must support the implementation of an effective cybersecurity culture in order to limit cyberattacks.…”

“…The employer with the bad managerial to their employee may affect employee values to following standards. As reported in [14] study, insider threats and a lack of cyber security awareness are the most significant cyber threats facing oil and gas assets. Along with [21] survey on the analysis of insider incidents, the insider threat reaches 65% of total cyberthreats because of negligent insider in front of malicious insider of 35%.…”

“…Clearly, the lack of qualified cybersecurity specialists may pose a significant challenge toward the extensive assets and sensitive data that hackers can exploit to make a personal gain or as part of a larger political or ideological agenda. Referring to [14] the cyberthreats against oil and gas companies have been increasing with high rates over the last 30 years, exploiting the unavailability of unified IS framework that secure this sector.…”

A Vulnerability Centric System of Systems Analysis on the Maritime Transportation Sector Most Valuable Assets: Recommendations for Port Facilities and Ships

“…Consequently, if a ship's navigation is tampered, it could lead to the ship running aground or cause collision and, in the worst-case scenario, an extended oil spill or even a gas explosion. The potential of a similar attack in offshore drilling units can have devastating effects [19]. Similarly, as it is analysed in the next section, ports, usually constituting part of a state's Critical National Infrastructure have several systems and services prone to cyber attacks.…”

Adoption of Cloud Enabling Cyber-Security Model in Organizations

“…This section explains potential shortcomings of the current information security model then shortly outlines the proposed cyber-security model for enterprises using cloud computing. There are many constraints in the implementation of cyber security by the organizations which are mentioned in Figure 5 (15) .…”