domains / families / security / performing-oil-gas-cybersecurity-assessment

performing-oil-gas-cybersecurity-assessment

separate

Conduct cybersecurity assessments of upstream, midstream, and downstream oil and gas operations, covering pipeline SCADA, refinery DCS, safety instrumented systems, and remote wellhead RTUs, and evaluate compliance with API 1164, TSA Pipeline Security Directives, and IEC 62443. Use when assessing a refinery, pipeline, or production facility or preparing for TSA/API compliance audits; not for IT-only or purely physical-security assessments.

When to use

• When conducting a cybersecurity assessment of a refinery, pipeline, or production facility
• When preparing for TSA Pipeline Security Directive compliance (SD-01, SD-02)
• When assessing cybersecurity posture against API Standard 1164 (Pipeline SCADA Security)
• When evaluating the security of remote wellhead SCADA systems and satellite communications
• When a merger, acquisition, or regulatory audit requires a comprehensive OT security evaluation

When not to use

• IT-only corporate network assessments
• physical security assessments without a cyber component
• environmental compliance assessments

Skill page

Source