Anonymous Oil and Gas
How Oil-and-Gas Producers Are Tackling Cybersecurity Threats
Download Case Study
Overview
In addition to significant business ramifications, a successful cyberattack on an oil and gas producer that affects its operational technology (OT) can result in an environmental disaster, injuries, or even loss of life. Petrochemical companies are major targets for threat actors, so it is imperative they fully protect their OT systems. Compliance is also a consideration, with oil and gas companies having to meet the U.S. Transportation Security Administration (TSA)’s new cybersecurity directive for the industry.
The Fortinet Security Fabric provides everything oil and gas companies need to meet the TSA’s directive. Fortinet’s OT solution includes hardware that securely unlocks the benefits of IT-OT convergence, and solutions that provide single-pane-of-glass visibility and unified management of all network resources. Additionally, the FortiGuard Enterprise Protection Bundle extends the FortiGate Next-Generation Firewalls’ (NGFWs’) intrusion prevention system (IPS) capabilities to support deep packet inspection (DPI). The Fortinet OT solution supports the cybersecurity asset identification process, streamlines network segmentation, enables access control restrictions, and significantly improves breach detection and response. All this, while reducing reliance on multiple vendors and devices—driving efficiency for lean networking and cybersecurity teams.
“As manufacturers and other industrial producers bring together Level 3 and Level 4 networking, they gain visibility and improve efficiency in security management. They also introduce potential new threats to devices on both levels. That is a scary thought in a world where attacks targeting OT infrastructure are ever-present.”
Business Impact
Increased security and better visibility into security events network-wide
Effective segmentation of operational and information technology (OT and IT), in compliance with the TSA Cybersecurity Directive
Centralized and automated deployment and management of firewalls and switches bring tremendous staff time savings
Overlap of services with standalone IPS and other devices enables retirement of some legacy tools, further enhancing efficiency
Widespread staff shortages in the industry are easier to manage, thanks to efficiency improvements
Related Stories
The company benefits from secure remote access to its rigs and complete visibility of all associated OT systems. With logging and indicators of compromise (IOC) fully integrated with the customer’s SOC, its internal security team is much better equipped to identify and mitigate threats."
-
Before, customers sometimes had to wait about 60 seconds for ENOC Pay transactions to be processed. With the new scenario, it is now less than 10 seconds—something that would have been impossible with the old network.”
- Mohammed Al Rais, CIO, Emirates National Oil Company
It was clear from the start that we would need a highly scalable, secure, and well-integrated network infrastructure with broad visibility and control. And the only way to sustainably achieve the scaling and flexibility required to support our ongoing innovation was to move to an increasingly cloud-based architecture through our strategic partnership with Google Cloud Platform and secured with Fortinet Security Fabric solutions.”
- Víctor Gimeno Granda, Chief Sustainability and Digital Off, Capital Energy
