In response to the news, please see below comments from Edgard Capdevielle, CEO of Nozomi Networks:
“We’re encouraged to see the DHS and TSA take action to ensure appropriate security measures for the oil and gas industry. Most critical infrastructure sectors don’t have mandatory cyber standards, and until now that included oil and gas.
“The requirement for mandatory breach reporting will help shine a light on the extent of the problem in this sector. Cybersecurity is a team sport. Pipeline operators, security vendors and the government alike need to work together as a community to share threat intelligence and breach data in real time. An open approach to information sharing will play a big part in building a more mature cyber defence.
“While there's a place for regulated security requirements, we need to be careful not to put all the burden on the victim(s). Tax incentives, and government-funded centres of excellence will help ensure critical infrastructure operators can build and maintain effective cybersecurity programmes over time. And it's time to take aggressive steps to hold sophisticated criminal rings and threat actors accountable for their crimes.
“The distributed nature of the oil and gas sector makes this extra challenging. It requires many different forms of connectivity and can be more difficult to secure. These environments are distributed and physically remote. No two operators are alike in terms of the exact processes and systems they’re using, which makes it harder to establish one set of cybersecurity requirements that will work effectively for all. There will need to be some flexibility and collaboration to make it work.
“We know from our work with leading oil and gas companies around the world that those suppliers who invest early in strong cybersecurity programs and resiliency are able to respond faster, and with less financial damage, to ransomware and other cyberattacks, compared to those who wait until an incident occurs to invest in their defence.”
Read the latest issue of World Pipelines magazine for pipeline news, project stories, industry insight and technical articles.
The May issue of World Pipelines includes a regional report on Canada’s oil and gas sector, as well as technical articles on integrity management software, leak detection, NDT, and project case studies. Don’t miss our feature on young pipeliners, in which World Pipelines’ Senior Editor Elizabeth Corner interviews the winners of the John Tiratsoo Award for Young Achievement, awarded by Young Pipeliners International, in partnership with PPIM.
Read the article online at: https://www.worldpipelines.com/business-news/26052021/nozomi-networks-comments-as-dhs-set-to-issue-cybersecurity-regulations-on-fuel-and-oil-pipelines/