A recent survey of more than 300 oil and gas companies found that more than 60 percent have suffered a security compromise in the past year and close to half of all attacks on operational technologies (OT) are going undetected. Those operational technologies typically include industrial control systems (ICS), supervisory control and data acquisition (SCADA) devices, and other related technologies implemented at operational facilities, such as plants, pipelines, terminals and rigs.
The industry is reluctant to challenge legacy OT systems for fear of creating interruptions or process errors. This article offers precautions to take to assure both operational continuity and a complete threat risk review.