Oil and gas producers must always factor security into drilling and pipeline projects. Protecting physical assets with fencing, lighting, security personnel, and more has long been standard. In today’s world of advanced technology, production operations require an additional layer of protection for the IT systems running many aspects of production operations. Following the Colonial Pipeline ransomware attack, producers and government agencies are taking measures to protect critical infrastructure to prevent future cyber attacks.
Updated Pipeline Security Directives
The TSA recently updated the initial directives issued after the Colonial Pipeline attack. They increased the required reporting speed from 12 to 24 hours. The second directive from TSA requires preventative steps to reduce vulnerabilities and increase protection and resilience for IT and operational technology. The directive requires companies to develop contingency plans, recovery plans, and annual third-party tests of cybersecurity practices.
The performance-based model of the new directive intends to offer greater flexibility to the industry, enhancing security and ensuring cybersecurity advancements as operational technology continues to improve. The TSA will continue to consult with industry leaders and federal partners to implement the directives without operational disruption.
The Colonial Pipeline attack, which caused a 6-day shutdown of the pipeline, revealed vulnerabilities in the oil and gas industry. The TSA directives intend to eliminate those vulnerabilities and allow for continued updates in protection for critical infrastructure. The TSA plans to codify cybersecurity requirements for pipelines and surface transportation systems in the following year.
Lack of security proves costly
Cybercrime costs are estimated to approach $7 trillion in 2022, causing every industry to take note and establish extensive protections against possible breaches in IT. Cyber attacks are costly to companies and consumers. The Colonial Pipeline cyberattack caused fuel shortages and higher gas prices due to the disruption in the fuel supply caused by its shutdown. Colonial Pipeline had to pay $4.4 million in ransom to regain control of the pipeline from the group responsible.
Physical threats to pipelines
Pipelines face threats to their physical assets through terrorism, environmental activism, and theft. While cyber threats are far less evident than physical threats, damage to oil and gas production can be just as great as physical damage caused by fires, paraffin build-up, theft, and vandalism.
Possible damage to oil and gas assets comes in many forms. Failure to establish safeguards for oil and gas production proves costly to oil companies and consumers. New regulations are setting the stage for future safeguards of assets and production capabilities.
Read more about the TSA’s security requirements in the Oil and Gas Journal.
Protecting your assets
While cybersecurity is a new threat to oilfield assets, Ideal Energy Solutions, LLC has long been in the business of protecting pipelines from physical damage. We manufacture the chemicals you need to keep your pipelines flowing. Learn more about our flow assurance products here!
