Two prominent security consultant firms estimate that energy companies, ranging from drillers to pipeline operators to utilities, invest less than 0.2 percent of their revenue in cyber security. For context, that’s at least a third less than the corresponding figure for banks and other financial institutions, according to the consultants, Precision Analytics and the CAP Group.
What makes the lack of investment even more worrisome is that the number of hacker groups targeting the energy sector is soaring. Symantec says it’s tracking at least 140 groups, up from 87 in 2015, some with links to foreign countries. And it’s just one of many security firms working with the industry.
“It’s scary," said Brian Walker, a former head of Marathon Oil’s global information technology IT and now an independent consultant. Executives making funding decisions “aren’t necessarily millennials who intuitively understand” how cyberthreats reach seemingly disconnected units, he said.
“It’s guys my age that are the problem," said Walker, who said he’s in his early 50s. “We’ve been 30-years trained in a world that doesn’t work this way anymore.”
These risks were on full display 4 weeks ago when at least seven pipeline operators from Energy Transfer Partners to TransCanada said their third-party electronic communications systems were shut down. Five of them ultimately confirmed the service disruptions were caused by hacking.
Though the attack didn’t disrupt supply, it served to underscore an ongoing vulnerability to electronic sabotage. It showed how even a minor attack can jump between systems with ripple effects, forcing utilities to warn of billing delays and making it more difficult for analysts and traders to predict a key government report on gas stockpiles.
Read the full story here.
Don't miss our latest HSE content, delivered to your inbox twice monthly. Sign up for the HSE Now newsletter. If you are not logged in, you will receive a confirmation email that you will need to click on to confirm you want to receive the newsletter.
10 Nov 2019
- Abu Dhabi, United Arab Emirates
This course will help you develop a better understanding of factors that could impact your daily economic decisions as well as establish a new set of applicable tools to use in your professional career.
11 - 12 Sep 2019
- Abu Dhabi, UAE
Reserve your place
16 - 18 Oct 2019
- Baku, Azerbaijan
Make plans to attend this premier event
22 - 24 Oct 2019
- Moscow, Russia
Take part in the discussion and reserve your place today
29 Oct 2019
- London, UK
Addressing the changing lanscape within oil and gas
2 - 3 Oct 2019
- Abu Dhabi, UAE
Network with colleagues and peers at this SPE Workshop
11 - 13 Nov 2019
- San Antonio, Texas, USA
Get up to date with the latest developments
HSE Now is a source for news and technical information affecting the health, safety, security, environment, and social responsibility discipline of the upstream oil and gas industry.
©2003-2019 Society of Petroleum Engineers, All Rights Reserved.