A cyber-threats expert from the US Federal Bureau of Investigation (FBI) told an audience at the recent American Petroleum Institute Cybersecurity Conference in The Woodlands, Texas, that oil and gas companies are at risk from potential cyberattacks and must do more to protect themselves.
Speaking on 7 November at a conference session on cyberattacks and emerging threats, FBI Computer Scientist James Morrison said that all companies need to be prepared to defend their enterprise and operating systems against such attacks of all kinds. Based in Houston, Morrison is a technical expert on information technology who works on cases that come into the bureau.
“Too many companies are thinking they’re not targeted,” Morrison said. “That is not the reality. Every single one of you will be attacked, if you have not already been attacked, and you’ve got to protect your data. You’ve got to protect the industrial control systems behind that data.”
Attacks on the Rise
During 2016, 75% of oil and gas companies had at least one cyberattack incident, according to Morrison. Attacks are on the rise to the point where “we’re actually getting a little numb about too many attacks,” he said.
More than 200 groups worldwide, including some linked to national governments, are thought to be involved in cyberattacks on US installations. The number appears to be growing, Morrison said, with the rise of criminal activity on the dark web.
“I, as a nation state, don’t even have to develop my own ransomware anymore,” he said. “I can actually hire somebody to develop ransomware and have it brought to me,” which has lowered barriers to entering cyberattack activities.
“And from an oil and gas standpoint, they’re not just targeting you, they’re targeting your subcontractors, and they’re targeting your law firms,” he said. “We’ve seen a number of law firms get hit because of the contract information that they have on you.”
Read the full story here.
Don't miss our latest HSE content, delivered to your inbox twice monthly. Sign up for the HSE Now newsletter. If you are not logged in, you will receive a confirmation email that you will need to click on to confirm you want to receive the newsletter.
10 Nov 2019
- Abu Dhabi, United Arab Emirates
Safety Leadership focuses on the ‘Human Factors’ (HF) which complement technical training to optimize reliability, safety, compliance, efficiency and risks within a team-based environment.
9 - 11 Nov 2019
- Abu Dhabi, UAE
The programme combines expert input, case studies, and immersive scenarios from the E&P and other industries to embed your learning and enable you to progress to the next level of your career.
11 - 12 Sep 2019
- Bakersfield, California, USA
Combine engineering with computer programming in this 2-day course
3 Oct 2019
- Calgary, Alberta, Canada
Being Human - reserve your place at this one-day course
3 - 4 Oct 2019
- Calgary, Alberta, Canada
For a better understanding of geomechanical factors, attend this course
HSE Now is a source for news and technical information affecting the health, safety, security, environment, and social responsibility discipline of the upstream oil and gas industry.
©2003-2019 Society of Petroleum Engineers, All Rights Reserved.