Petroleum Engineering Industry Trends

FUTURE OF ENERGY WITH INTEGRATED OT RISK INTELLIGENCE Last month in Houston, I had the opportunity to meet Rafael Narezzi from Centrii, an entrepreneur and friend from the cybersecurity community, and see firsthand how their platform is tackling one of the most urgent challenges facing the energy sector today: the convergence of cyber risk, operational technology (OT), and rapidly evolving threat landscapes. Energy infrastructure is becoming more digital, more interconnected, and consequently more exposed. From OT/ICS environments to distributed renewable assets, the attack surface is expanding faster than traditional security and compliance models can keep up. This is exactly why Integrated Risk Management (IRM) is no longer optional; it is foundational. Leaders need a single, intelligent view of risk across assets, operations, and compliance to make faster and more confident decisions. What impressed me about the Centrii solution is its purpose-built focus on critical energy infrastructure. Instead of fragmented dashboards and siloed data, it centralizes OT/ICS security data into clear, actionable visuals that help teams: • Spot vulnerabilities and anomalies in seconds • Align stakeholders through intuitive compliance and security reporting • Maintain a real-time global snapshot of operational risk • Strengthen resilience while supporting regulatory obligations and business continuity In a short conversation, we discovered new opportunities for improvement and value creation, a common occurrence when two restless minds meet. In a world where cyber threats against energy and critical infrastructure are becoming more sophisticated and targeted, platforms that combine operational context, automation, and risk intelligence will define the next generation of security. Great to see innovative, focused companies pushing the boundaries of OT cybersecurity and contributing to a more resilient and secure energy ecosystem. Let's see what we can do together to support the present and future market needs. #cybersecurity #irm #ciso #accenture #centrii #ot

A Faulty Update, Millions Impacted: Are Our Critical Systems Secure Enough? This week's global IT outage caused by a faulty security update is a stark reminder of the interconnectedness of our world,and the potential domino effect when a single system experiences a hiccup. The disruption, impacting millions and causing delays in critical sectors like healthcare and finance, underscores a crucial question: are the automation systems that power our critical infrastructure truly secure? These Industrial Automation and Control Systems (IACS) are the invisible maestros behind the scenes, keeping our lights on, our water flowing, and our transportation networks operational. Yet, when compromised, the consequences can be catastrophic. Here's where robust cybersecurity measures become paramount. The IEC (International Electrotechnical Commission) 62443 standard provides a well-established framework for securing IACS and other critical IT infrastructure. This globally recognized standard emphasizes thorough risk assessments – a process best entrusted to competent and certified automation cybersecurity specialists. These specialists, verified by independent bodies like exida, possess the expertise to meticulously evaluate your IACS and critical IT infrastructure for vulnerabilities, ensuring your critical infrastructure remains resilient against cyber threats. My recent paper published in the Jurnal Ikatan Ahli Fasilitas Produksi Minyak dan Gas Bumi Indonesia - IAFMI (IAFMI) dives deeper into specific cybersecurity best practices for the oil and gas industry, a prime example of a sector reliant on secure automation and IT systems. You can read more about it here: https://lnkd.in/d67C3EMK Pak Irfan H. and I provide automation cybersecurity risk assessment services to help your organization achieve IEC 62443 compliance. Don't wait for a cyber incident to become a headline. Proactive measures are essential to safeguard our critical infrastructure – and the well-being of millions – for a more secure tomorrow. #Rishare #MenggapaiMimpiBersamaRiandhy #oilandgasindustry #ThinkDigitalThinkDhimas

Purdue Level Oil & Gas Example Relevant ISA-99 / IEC 62443 Standard Level 0 – Process Sensors, actuators, field instruments (e.g., pressure transmitters, control valves at wellheads/pipelines) IEC 62443-3-2 (risk assessment), IEC 62443-3-3 (foundational requirements) Level 1 – Basic Control PLCs, DCS controllers, Safety PLCs managing drilling rigs, compressors, separators IEC 62443-4-2 (secure component requirements) Level 2 – Supervisory Control SCADA servers, HMIs, historians for pipeline monitoring & offshore platforms IEC 62443-3-3 (system requirements), Zones & Conduits Level 3 – Site Operations (MES) MES, batch scheduling, production monitoring, custody transfer systems IEC 62443-2-4 (secure system integration practices) Level 4 – Enterprise (ERP/Business) ERP, supply chain, maintenance, logistics systems IEC 62443-2-1 (security policies & procedures) Level 5 – External / Cloud / Partners Corporate WAN, vendor remote access, cloud analytics IEC 62443-3-2 (risk zones/conduits), IEC 62443-2-3 (remote access mgmt.) • Purdue = Where systems live (process to enterprise). • ISA-99 / IEC 62443 = How to secure them (zones, conduits, SLs, lifecycle). • In Oil & Gas, risks like remote access, vendor connectivity, and OT/IT convergence make this mapping vital. • Use zones & conduits to separate drilling rigs, SCADA, MES, and ERP. • Apply the right security level (SL1–SL4) based on risk: e.g., pipeline SCADA often requires SL2–SL3. This combined framework ensures safe, reliable, and cyber-resilient operations in critical Oil & Gas infrastructure.

The new era of cyber threats in the Middle East isn’t about data - it’s about control over vital resources. For years, I’ve tracked cyberattacks on critical infrastructure. But today’s events in the Middle East signal a dramatic shift - not just a security issue, but a challenge to economic stability, energy control, and national resilience. Key Trends Impacting Middle Eastern CNI: 73.2% of cyberattacks now target Operational Technology (OT) systems. A 300% surge in DDoS attacks is disrupting energy, oil & gas, and government networks. State-backed groups are increasingly infiltrating ICS and SCADA environments. A Timeline of Escalation: - 2023: A major supply chain breach attempt shakes the region. - 2024: Cyber intrusions into power grids rise sharply. - February 2024: An OT-targeted attack forces an industrial facility to shut down temporarily. These aren’t isolated incidents - they form part of a coordinated geopolitical strategy aimed at undermining essential services. Bridging the IT-OT Security Gap: Historically, IT and OT systems operated in separate silos. However, as digitalization merges these environments, vulnerabilities emerge: - Outdated OT Systems: Many run on legacy software, not designed for today’s cybersecurity challenges. - Interconnected Breaches: An IT breach can now lead to access in OT environments. - Lack of Real-Time Monitoring: Without continuous oversight, industrial networks remain exposed. The consequences are real: compromised oil transportation, manipulated water treatment systems, and governments scrambling to rewrite security policies overnight. The Path Forward: A Resilience-First Strategy To protect our critical infrastructure, we must evolve beyond compliance: - Integrated IT-OT Security: Achieve full visibility across both environments. - AI-Powered Threat Detection: Use real-time, AI-driven anomaly detection. - Zero Trust Architectures: Continuously verify every device and user. - Supply Chain Vigilance: With 82% of incidents linked to vendor vulnerabilities, monitoring is crucial. - Adaptive Cybersecurity: Embrace red teaming and robust incident response planning. Let’s Connect: How is your organization addressing the IT-OT security gap? I’d love to hear your insights and explore strategies to build resilient critical infrastructure together. Feel free to reach out or schedule a quick chat with my team. Meeting link in the comment section. My team and I are working on something critical and valuable. We’re in stealth mode, developing a platform to strengthen CNI security against evolving OT threats. By April, we’ll begin building a prototype to address these critical challenges head-on. #CNI #CyberSecurity #MiddleEast #OTSecurity #ThreatDetection #ZeroTrust #CriticalInfrastructure

As OT environments become more connected, the edge is rapidly becoming one of the most targeted and overlooked attack surfaces in critical infrastructure. This article highlights a growing reality: IP cameras, access control systems, IoT sensors, and monitoring devices are now part of the cyber risk landscape, and integrators play a central role in securing them. In oil & gas and other industrial sectors, attackers aren’t always exploiting advanced zero-days. They’re taking advantage of weak defaults, unpatched firmware, insecure cloud channels, poor segmentation, and unmanaged third-party devices. With physical security systems now directly intersecting IT and OT networks, the stakes have never been higher. The path forward is clear: 🔹 Harden every device before it ever touches the network 🔹 Segment aggressively and isolate where possible 🔹 Treat remote access as a privilege, time-bound, monitored, and approved 🔹 Validate supply chain components and firmware sources 🔹 Build cybersecurity into every installation, not after Physical security and OT security are no longer separate domains. The integrators who embrace this shift, and embed cyber resilience into every deployment, will be the ones best positioned to protect critical infrastructure as attacks continue to evolve. Proud to see this conversation gaining traction across the industry. #OTSecurity #CyberPhysicalSecurity #SecureByDesign #SupplyChainSecurity

The biggest misconception in cybersecurity? Thinking SCADA and OT systems are “too isolated” to be targeted. Modern industrial environments are more connected than ever: • Remote vendor access • Cloud monitoring platforms • Smart sensors and IoT devices • Integrated IT/OT operations • Third-party software dependencies Every new connection increases operational efficiency, but they also expand the attack surface. Cybercriminals and nation-state actors understand this. That’s why critical infrastructure sectors like energy, manufacturing, water treatment, transportation, and utilities continue to face increasing threats from ransomware, supply chain compromises, and targeted OT attacks. The challenge is that many Operational Technology environments were never designed with cybersecurity in mind. Their primary goals were: ✔ Reliability ✔ Availability ✔ Safety Not: ❌ Zero Trust ❌ Endpoint protection ❌ Modern authentication ❌ Continuous monitoring This creates a dangerous gap between operational needs and modern cyber threats. One compromised engineering workstation, one exposed remote access connection, or one vulnerable third-party vendor can become the entry point into an entire industrial environment. And unlike traditional IT incidents, OT attacks can create real-world consequences: ⚠ Production outages ⚠ Equipment damage ⚠ Utility disruptions ⚠ Safety hazards ⚠ Environmental impact SCADA/OT security is no longer just an engineering problem or an IT problem. It’s a business continuity issue. Organizations that prioritize visibility, segmentation, secure remote access, and cross-team collaboration between IT and OT will be far better positioned to withstand the next generation of attacks. Because in critical infrastructure, downtime is more than inconvenient, it can be catastrophic. #CyberSecurity #SCADA #OT #ICS #CriticalInfrastructure #IndustrialSecurity #OperationalTechnology #CyberResilience #InfrastructureProtection #SCADASecurity

After decades in cybersecurity, I’ve learned that the most dangerous attacks are the ones that look normal. That lesson is now hitting operational technology. Attackers are beginning to use “living off the plant” techniques, abusing native OT protocols and legitimate control functions rather than deploying obvious malware. Once inside, they blend into routine industrial traffic, making malicious actions nearly indistinguishable from everyday operations. This demands deep understanding of physical processes, PLC behavior, and site-specific configurations, a bar that has historically limited large-scale OT attacks. But that barrier is eroding as OT environments become more connected, standardized, and exposed. The risk is no longer just downtime. It includes equipment damage, safety incidents, and cascading business impact. OT security can no longer rely on perimeter controls and hope. It requires protocol-aware visibility, segmentation, and teams who understand how the plant actually runs, not just how the network is wired. https://lnkd.in/gpQWUF_s #auguryit #nationalsecurity

Energy Dominance in 2025: Opportunities and Cyber Risks While these policies promise economic growth, energy security, and geopolitical leverage, they also expand the attack surface for cyber threats. Increased reliance on interconnected OT systems (ICS, SIS, IIoT, SCADA) in LNG export terminals, offshore rigs, and pipelines creates vulnerabilities ripe for exploitation—not just by adversaries but also by criminals, espionage actors, and internal threats. Third-party risks from contractors and suppliers, combined with blind ignorance of cybersecurity best practices, further complicate the landscape, leaving critical systems exposed. **** Decades of deploying and field-assessing systems have taught me one undeniable truth: rapid deployment is a breeding ground for vulnerabilities. The faster we move, the greater the risk of cutting corners, overlooking threats, and leaving systems exposed. Are we prioritizing speed over resilience? **** To succeed, energy dominance must go hand-in-hand with robust cybersecurity strategies, including cyber-informed engineering (CIE, CFA), ISA/IEC 62443 standards, SANS ICS Five, and enhanced public-private collaboration. Let’s build an energy future that is not just dominant but resilient. I look forward to working with ONG/Energy companies in 2025! #CyberSecurity #Energy #OTSecurity #Leadership #ONG https://lnkd.in/g3VibH8a

I had an opportunity this morning to review the draft second edition of API Recommended Practice 1173 (Pipeline Safety Management Systems). While I was encouraged to see a few mentions of cybersecurity, I was surprised—and frankly concerned—by how limited they were. Cyber threats were treated as optional considerations rather than a significant risk to safety management. This is a missed opportunity. Cybersecurity incidents that compromise industrial control or safety systems (e.g., SCADA, ICS, SIS) can initiate a process upset (e.g., overpressure) or suppress critical automated safety interlocks, leading to loss of containment. The API Standard 1164, "Pipeline Control Systems Cybersecurity", makes this connection clear, requiring tailored cybersecurity risk assessments for pipeline control systems. Yet, the API 1173 draft didn't reference API 1164. Also surprising, the TSA Pipeline Security Directives—issued in response to the Colonial Pipeline ransomware attack—are not referenced at all. These directives mandate cybersecurity measures that directly support pipeline integrity and public safety. I’ve submitted formal comments to the API 1173 committee urging them to:  • Elevate cybersecurity from a suggestion to a requirement.  • Reference API 1164 directly in the document.  • Include the TSA Pipeline Security Directives in the bibliography. Let’s ensure our safety standards keep pace with the cybersecurity risks we face. #PipelineSafety #Cybersecurity #API1173 #API1164 #TSA #OTSecurity #SCADA #ICS #PSMS #CriticalInfrastructure

Anyone who has truly carried operational responsibility knows that “switch to manual” is not a simple line in an incident-response plan. As an asset owner, I worked alongside some of the finest process engineers I have ever met. I watched them keep an entire gas production plant operating manually for 6 hours after losing view. They understood every interaction, operating limit, safeguard, and consequence. No dashboard, scanner, or security tool could replace that judgment. That experience taught me the difference between having OT in a title and being accountable for a physical process. The recent attacks against water systems involved both discontinued MicroLogix 1100 controllers and Active Mature MicroLogix 1400 controllers. Lifecycle matters, but age alone does not determine risk. Operational function, internet exposure, remote access, repeated third-party architectures, configuration integrity, and recovery capability matter more. My latest article explains why an OT cybersecurity assessment must go beyond scanning and asset lists. It must establish what each asset does, how it can be reached, what happens when it is lost, and whether operators can continue safely without automation. #OTCybersecurity #CriticalInfrastructure #IndustrialControlSystems #OperationalResilience #WaterSecurity #OTCISO