Threats to cybersecurity continue to increase in number and appear from unexpected new angles because of increasing sophistication of cyberattacks. A novel methodology is required not only to protect data but also to achieve safe and reliable operations at sea.
The first step toward securing control systems is to make sure they are designed and operated in accordance with recognized international standards and recommendations, such as the International Organization for Standardization 27000 series, the International Electrotechnical Commission 62443 family of standards, the National Institute of Standards and Technology framework, or the International Association of Drilling Contractors cybersecurity guidelines. In addition, testing and probing these systems and their associated networks for possible vulnerabilities and robustness under high traffic loads are important steps to verifying that the implementation of the design is safe, secure, and conducted in accordance with the vendor’s or the system integrator’s documentation.
This paper provides tangible examples of findings from cybersecurity and network health tests performed on various vessels and installations—such as shuttle tankers; drilling rigs; and floating production, storage, and offloading vessels—by the DNV GL Marine Cybernetics Advisory. Typical pitfalls of onboard cybersecurity are discussed, such as inadequate protection mechanisms, installation failures and mismatches between documentation and installation, vulnerabilities in controllers, and insufficient network capacities.
Find the paper on the HSSE-SR Technical Discipline Page free for a limited time.
Don't miss our latest HSE content, delivered to your inbox twice monthly. Sign up for the HSE Now newsletter. If you are not logged in, you will receive a confirmation email that you will need to click on to confirm you want to receive the newsletter.
11 Nov 2018
- Abu Dhabi, UAE
Training course by Dr. Kamel Ben-Naceur
17 Sep 2018
- Calgary, Alberta, Canada
Training course -- Plan to attend!
8 - 9 Oct 2018
- Kuala Lumpur, Malaysia
Well integrity is often managed as part of the asset’s lifecycle production and maintenance. But ageing wells pose new challenges. Learn how to manage integrity sustainably.
18 - 19 Sep 2018
- Calgary, Alberta, Canada
Regulatory pressure and public perception are driving a significant focus on wellbore abandonments. Complications arise when there are integrity issues that require remediation. Explore new techniques for resolving these issues.
24 - 26 Sep 2018
- Dallas, Texas USA
Be part of SPE's annual conference for great papers, networking, training, award presentations and so much more. Register today!
HSE Now is a source for news and technical information affecting the health, safety, security, environment, and social responsibility discipline of the upstream oil and gas industry.
©2003-2018 Society of Petroleum Engineers, All Rights Reserved.