<\/span>Cyber challenges within the
\nExploration and Production lifecycle<\/p><\/h1><\/span><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
Access, Explore, Appraise and Select stages<\/p><\/h1><\/div>
While the value of seismic data may be low on an attacker\u2019s radar, the cost for conducting the exploration and seismic activity can be significant, requiring strong information and data management controls. As exploration teams collaborate across the different areas of activity, they move toward Apprise and Select, the point where major investment decisions are made. At the Select stage, information is often considered highly confidential and requires considerable cyber security attention.<\/p>\n
Additional activity may also include \u2018licensing rounds\u2019 and \u2018mergers and acquisition\u2019 activity, information equally classed as highly confidential.<\/p><\/h2><\/div><\/div><\/div>
Consider: <\/strong>Digital platforms processing this data were traditionally used on premises, but the trend is toward new platforms able to integrate, applications and processes in the cloud. Good information and data management must be supported with cyber requirements within robust contracting to cloud providers, removal of single points of failure, backed up data and workflows with tried and tested recovery. Baselines require monitoring to identify and investigate anomalies to reduce cyber threat and insider risk.<\/p><\/h2><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
Define and execute stages<\/p><\/h1><\/div>
Once a site has been selected for development, significant capital programme management is initiated. Activities can include design of new assets and facilities to contracting existing, for example, Floating Production Storage and Offload (FPSO). Where new assets are built, it is essential cyber security is integrated at the design stage. This includes within IT systems, Industrial Control Systems (ICS) on board vessels and rigs and even protecting Maritime systems. Exploration and production companies need to also be aware of increasing regulation. For example, maritime regulation now requires vessels to have a Cyber Security Management Plan (CSMP).<\/p>\n
Additional design specification, operational maintenance, land transport, maritime and aviation contracts can be attractive targets for cybercrime and fraud.<\/p><\/h2><\/div><\/div><\/div>
Consider: <\/strong>Cyber-security-accepted-industry best practice frameworks, for example IEC62443 supports OT environments, can be used for the development of secure architecture and vulnerability analysis for operators, and secure practices of vendors of systems and components.<\/p><\/h2><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
Maintain and operate stages<\/p><\/h1><\/div>