Protecting “cybersecurity & resiliency” of nation’s critical infrastructure - energy, oil & gas

Cyber-secure, resilient energy is paramount to the prosperity of the United States. As the experience and sophistication of cyber adversaries grow, so too must the US power system’s defenses, situational awareness, and response and recovery strategies. Traditionally, power systems were operated with dedicated communication channels to large generators and utility-owned assets but network connectivity in today’s industrial entities, including electrical utilities, has exposed many digital communication and control aspects to the threat of cyber-attacks. When forward-looking improvements including smart grid, smart meters and other advancements are considered, security is of foremost concern. In fact, governments around the world have recognized the existing vulnerability and need to protect the grid infrastructure. To solve the problem, regulations and standards are being developed to ensure that the proper security steps are taken. In addition, cyber attackers have targeted crude oil and natural gas (O&G) companies, with attacks growing in frequency, sophistication, and impact as the industry employs ever more connected technology. But the industry’s cyber maturity is relatively low, and O&G boards show generally limited strategic appreciation of cyber issues. This research paper documents the current Cyber security gaps across Energy, Oil & Gas sector systems spread throughout US, highlights required security enhancements and recommendations to foster Cyber Security & Resiliency of our Critical Infrastructure.