logo-agsl-color-512x512 Created with Sketch.
Asset Guardian
The Challenge and the Solution
Configuration Change Management
Managing Obsolescence
Disaster Recovery and Risk
Project Operations and Maintenance
Global Connectivity
AG Interface
Functionality and Features
Licencing and Support
Cyber Security Management System Software Solution for one of the World's Leading Oil and Gas Operators
Published by Graham Foss on 31 January 2018
A major oil and gas operator undertook to protect itself from the ever increasing threat of cyber attack. In order to do this, they sought to comply with the industry standard IEC 62443 which is the cyber security standard specific to the Controls and Automation industry.
It comprises standards, reports and procedures pertaining to industrial control systems cyber security in a controls and automation environment defined and known as an IACS (Industrial Automation and Control Systems). In the case of this particular oil and gas operator, the area that was required to meet the standard consisted of nine offshore sites and two onshore.
The main challenges faced by the Oil and Gas operator were:
As their systems became more and more integrated, they became increasingly vulnerable to Cyber Security threats for instance phishing, water-holing, ransomware and malware.
These threats could be launched from anywhere in the world and originate from apparently trusted sources
Offshore facilities that used to be considered safe by existing in virtual isolation were becoming more vulnerable due to forms of potentially unsecured connections such as USB, Wi-Fi, and Blue Tooth.
The IEC 62443 standard is written to combat these threats and it specifies the use of a CSMS (Cyber Security Management System), a robust cyber security framework. A CSMS defines the business's entire cyber security strategy, which includes the use of a computer based system to track everything related to protecting against all forms of cyber attack.
The oil and gas operator were already aware that they had Asset Guardian installed on all of their onshore and offshore sites. It was being used to provide a single repository for storing the data of programmable systems, supporting access to data both on and off shore, providing effective PLC code management and as part of their disaster recovery strategy.
After review, it was decided that rather than paying for another software package dedicated to cyber security, that Asset Guardian would be used as the system required as part of the CSMS as defined in IEC 62443.
It was found that with Asset Guardian, not only was the network architecture in place, there also existed a wealth of data and information entered into the database that already filled many of their requirements. Asset Guardian's systematic approach to handling access, logging and managing of information, and software was well suited for use as a CSMS and would add value to their initial investment. In fact Asset Guardian already offered the functionality to manage cyber security issues such as:
Patch levels and software upgrades
Identify cyber security risks
Organise user training
Improve existing business continuity and disaster recovery plans
Organize and structure personnel, physical and environmental security
Document network segmentation
Record Access Control (i.e. Administration/Authentication/Authorization)
Cyber Security Incident Reports
Provide Analytics to improve, develop and maintain the overall CSMS
Asset Guardian was also already an important component of the Operator's Disaster Recovery Plan. Software held in Asset Guardian was split over nine offshore sites, with a master server held at the head office. In the event of data loss in any of the sites they could be restored from the master. The master in turn was backed up at a secondary onshore site as part of the disaster recovery plan.
Consideration was also given to the fact that Asset Guardian regularly reviewed IEC 62443 and other relevant industry standards and that the Asset Guardian software was update to meet these standards when required.
The IEC 62443 standard is wide ranging, covering all aspects of cyber security in the controls and automation industry. The use of Asset Guardian as a CSMS as part of the overall cyber security strategy ensured that the operator was adhering to this standard.
If you would like any more information on Asset Guardian, or the Cyber Security Solutions we provide, please fill out the contact form below and a member of our team will be in contact soon.
Written by Graham Foss. As one of AGSL's team of Technical Consultants, Graham Foss is responsible for implementing the company's product development and technology strategy. Before joining AGSL in 2016, Graham was employed for 12 years as a lead software engineer at Aker Solutions Subsea Ltd, where he worked on projects in the North Sea, North Atlantic and Norway. Graham holds a degree in Computing from Edinburgh's Napier University in Edinburgh, where he graduated with distinction. A Chartered Engineer, he is a member of the Institution ofEngineering and Technology (IET).
Posted in Case Studies, Cyber Security Management, Disaster Recovery, Documentation version control and back-ups, Obsolescence Management, Password Control, Password Management, Security of All Users actions, Software Back up and Revision ControlTagged Asset Guardian, Asset Guardian Solutions Limited, CSMS, Cyber Risk, Cyber Security, Disaster Recovery, FRACAS Reporting, Functional Safety, IACS, Incident Management, Obsolescence Management, Offshore Audits, Oil and Gas, Onshore Audits, Version Control
Singapore's OT Cybersecurity Landscape and the Asset Guardian Solution
Asset Guardian Solutions Appoints New Technical Consultant As It Keeps Up With Global Demand
Energy from Waste: An interview with Patrick McConville, Business Development Manager at Asset Guardian Solutions Limited
Asset Guardian Solutions Limited successfully renews ISO 9001:2015 certification
Asset Guardian Solutions Limited (AGSL) to raise money for the Scottish Association for Mental Health (SAMH)
Offshore Management of Change and Auditing Solution for Stena Drilling
Automatic DCS Backups Process Solution for Leading Oil and Gas Operator
© 2021 Asset Guardian
We use cookies for analytics and to improve your experience. Read more.