Harris and Trump make final push in must-win Pennsylvania    Drones and snipers on standby to protect Arizona vote-counters    India's Modi condemns violence after Canada temple incident    Elon Musk can keep giving $1m to voters, judge rules    Al Ahli extends perfect start with 5-1 victory over Al Shorta    Mitrovic's hat-trick leads Al Hilal to 3-0 victory over Esteghlal    Tourism Development Fund launches "Tourism Empowerment" programs to enhance sustainable growth of SMEs    Saudi crown prince, Tunisian president review bilateral relations in phone call    SFDA Chief visits premier biotechnology and medical firms in China    Al-Khereiji: Collective action in combating terrorism is a must for achieving stability and prosperity    Saudi Awwal Bank becomes the Kingdom's first bank obtaining ISO certification for quality management system in operations    10 cooperation agreements signed during Saudi-Turkish Business Forum in Istanbul    Saudi Arabia's non-oil revenues grow 6% in 9 months while Q3 budget posts SR30 billion deficit    Quincy Jones, titan of US music, dies aged 91    Enhancing zakat, tax, and customs compliance takes center stage at the Zakat, Tax, and Customs Conference 2024    Neymar expected to join Al Hilal squad for AFC clash against Esteghlal, says coach Jesus    Al Qadsiah secure 2-0 victory over Al Ettifaq in first Eastern Derby since 2021    Hidden sugars in Asia's baby food spark concerns    HONOR unveils pre-order of the stunning HONOR MagicBook Art 14 Featuring an ultra-slim design, HONOR Eye Comfort Display and AI Cross-OS WorkStation    Teri Garr, Young Frankenstein and Tootsie star, dies at 79    India puts blockbuster Pakistani film on hold    The Vikings and the Islamic world    Filipino pilgrim's incredible evolution from an enemy of Islam to its staunch advocate    Muted Eid celebrations for millions of Nigerian Muslims    Exotic Taif Roses Simulation Performed at Taif Rose Festival    Asian shares mixed Tuesday    Weather Forecast for Tuesday    Saudi Tourism Authority Participates in Arabian Travel Market Exhibition in Dubai    Minister of Industry Announces 50 Investment Opportunities Worth over SAR 96 Billion in Machinery, Equipment Sector    HRH Crown Prince Offers Condolences to Crown Prince of Kuwait on Death of Sheikh Fawaz Salman Abdullah Al-Ali Al-Malek Al-Sabah    HRH Crown Prince Congratulates Santiago Peña on Winning Presidential Election in Paraguay    SDAIA Launches 1st Phase of 'Elevate Program' to Train 1,000 Women on Data, AI    41 Saudi Citizens and 171 Others from Brotherly and Friendly Countries Arrive in Saudi Arabia from Sudan    Saudi Arabia Hosts 1st Meeting of Arab Authorities Controlling Medicines    General Directorate of Narcotics Control Foils Attempt to Smuggle over 5 Million Amphetamine Pills    NAVI Javelins Crowned as Champions of Women's Counter-Strike: Global Offensive (CS:GO) Competitions    Saudi Karate Team Wins Four Medals in World Youth League Championship    Third Edition of FIFA Forward Program Kicks off in Riyadh    Evacuated from Sudan, 187 Nationals from Several Countries Arrive in Jeddah    SPA Documents Thajjud Prayer at Prophet's Mosque in Madinah    SFDA Recommends to Test Blood Sugar at Home Two or Three Hours after Meals    SFDA Offers Various Recommendations for Safe Food Frying    SFDA Provides Five Tips for Using Home Blood Pressure Monitor    SFDA: Instant Soup Contains Large Amounts of Salt    Mawani: New shipping service to connect Jubail Commercial Port to 11 global ports    Custodian of the Two Holy Mosques Delivers Speech to Pilgrims, Citizens, Residents and Muslims around the World    Sheikh Al-Issa in Arafah's Sermon: Allaah Blessed You by Making It Easy for You to Carry out This Obligation. Thus, Ensure Following the Guidance of Your Prophet    Custodian of the Two Holy Mosques addresses citizens and all Muslims on the occasion of the Holy month of Ramadan    







Thank you for reporting!
This image will be automatically disabled when it gets reported by several people.



Cybersecurity must be top priority for oil & gas players in Middle East
Published in The Saudi Gazette on 11 - 07 - 2016

Today, concern about cybersecurity is particularly high within the oil and gas industry, which faces a far wider spectrum of threats – threats that are potentially more severe in comparison to other key industries. In the Middle East, specifically, the rate of cyberattacks targeting companies in the oil and gas sector is notably high, especially compared to global figures. In fact, according to Repository of Industrial Security Incidents (RISI) data, cyberattacks against oil and gas organizations in the Middle East make up more than half of the recorded instances. In parallel, in the US or other Western countries, they make up less than 30 percent of the recorded instances.
In recent years, there has been a growing prevalence of cyberattacks in the region. In 2014, Kaspersky Security Network revealed that, the previous year, more than 650,000 ransomware infection incidents had taken place across the Middle East and North Africa (MENA) region – including the oil and gas sector. A year later, in 2015, cybersecurity firm Symantec reported that Trojan Laziok, an aggressive malware program, had attempted to steal data from energy companies around the world, some based in the Middle East. Remarkably, 25 percent of the attempted cyberattacks targeted companies in the UAE versus 10 percent in both Saudi Arabia and Kuwait and 5 percent in both Oman and Qatar.
This, of course, raises three pivotal questions: Why are oil and gas companies in the Middle East more vulnerable to attacks? How can organizations that have fallen victim to cyberattacks ensure a quick recovery? And what can they do to fend off future attackers?
The reality is, in recent years, companies in the region have invested heavily in newer IT infrastructure and solutions – including multiple mobile devices connected to the oil and gas companies' networks. Given their widespread popularity and ability to store sensitive or confidential data, mobile devices are increasingly turning into an open frontier for cyberattacks. In the Middle East and Africa, the situation is especially dire considering the region's high mobile phone penetration rates. And this trend shows no sign of waning: independent market research company eMarketer predicts that over 789 million people in the Middle East and Africa will own at least one mobile phone in 2019 – and it is fair to assume that they will be bringing their device to work.
In this day and age, inadequate boundary protection is a strong point of vulnerability. It can make it difficult to detect nefarious activity and can create avenues that allow outside parties to interface with systems and devices that directly support a company's control processes. It can also provide an "easy" access route to industrial control systems – as most communication protocols for measuring and control devices are not as well encrypted as those for business communication systems.
Another critical point of vulnerability is information flow enforcement. If false data is fed into the system or information is siphoned off, most companies would likely never know that for a fact – it could even go completely undetected. There is wide speculation that the colossal malware attack on oil giant Saudi Aramco's systems in 2012 was actually a cover-up for earlier information flow breaches.
Insufficient control of information flows can allow attackers to establish unsanctioned and damaging commands and controls with potentially severe consequences for the physical infrastructure, the value of national assets and personal safety and health.
The potential points of attack are plenty. Transactions in the oil and gas arena are broad in scope and range from sensitive information on well sites to end-user consumption at the pumps.
The danger posed by large-scale threats is significant, given the physically expansive infrastructure of oil and gas production and distribution. For instance, the ramifications of a successful cyberattack on an oil and gas company in the Middle East could carry grave implications on national security. In most countries in the region, the oil and gas sector is the main source of income for the government and accounts for 60 to 70 percent of fiscal spending resources.
Governments in the region, including those of Saudi Arabia and Qatar, have crafted multi-phased national cyber security strategies and developed related policies and frameworks, focusing specific attention on critical infrastructure and national interests. For example, the Qatar National Cyber Security Strategy (NCSS) "was developed by the National Cyber Security Committee, presided by the Ministry of Information and Communications Technology, in light of the strategic thrusts of Qatar's National ICT Plan 2015 to protect the national critical information infrastructure and to provide a safe and secure online environment for the different sectors."
These various bodies and efforts notwithstanding, individual oil and gas companies in the Middle East need to take primary responsibility for their cybersecurity strategies themselves. The Boston Consulting Group (BCG) recommends a risk-based approach centered on three steps. These include:
Developing an understanding of the precise risk to the company's assets and the effort and resources necessary to mitigate them
Building and sustaining a multilayered defense system
Managing cybersecurity risk on a consistent basis
To conclude, the increasing technological complexity of today's oil and gas industry – driven by, for example, the industry's spiraling deployment of data mining and analytics technologies, sensor and networking technologies, industrial systems, and systems integration technologies – is rendering it increasingly vulnerable to cyberattacks. To protect themselves, their shareholders, and their customers adequately, oil and gas players in the Middle East must make cybersecurity a highest priority and an ongoing consideration at the executive level.
* The writer is Partner & Managing Director at Boston Consulting Group


Clic here to read the story from its source.