720-891-1663
The oil and gas industry is part of our nation's critical infrastructure - and internal and external adversaries know it. Virtually ALL aspects of oil and gas operations are impacted to one degree or another by information technology systems. And it is widely known within and without the industry that these systems are vulnerable to cyber attack.
Operational interruptions can have escalating and cascading effects that can result in enormous direct and indirect costs and consequences.
Oil fields, refineries, and pipelines are controlled by legacy industrial control systems that are built, operated, and maintained by petroleum and industrial engineers who typically don't have experience or knowledge of the information security domain.
New refinery and distribution systems (both distributed and remote) offer unparalleled monitoring and management capabilities that provide necessary insight and control into critical operations--as well as cost savings. But these systems rely on common (and extremely vulnerable) Internet and computer networking technologies to deliver their functionality. It is mandatory that these new technologies are integrated with the proper security configuration, safeguards, and monitoring to protect them from attack and exploitation.
Legacy industrial control systems must be protected and vulnerabilities mitigated, using defense-in-depth principles even with the constraints of proprietary technologies, limited processing power, and fragile interfaces.
CyberCecurity and Solutionary offer managed security and consulting services that protect Critical Cyber Assets associated with the oil and gas industry. Solutionary is currently protecting the IT assets of two very significant oil and gas enterprises, Marathon Oil Company and Amerigas.
Houston Chronicle Article Aug 15, 2014: Oil & Gas Cybersecurity is Hard to Ensure or Insure
It's not just about refineries, pipelines and other major infrastructure--far from it. All oil and gas companies, big and small have business information assets that require protection. Here is a short list that demonstrates the point.
I do not believe that there is a single, secure, unclassified computer network
in the U.S. today.
Please call Ray Hutchins today at 303-997-5506 for more information about how CyberCecurity can solve your organization's IT security problems.