Cybersecurity threats in oiland gas industrial information system (IIS)

Asfha Amanuel Estifanos, Vaish Abhishek

Oil and gas operations (upstream, midstream, and downstream) – are prominent targets for cyber threats of all kinds, much like essential businesses everywhere. Criminal companies, governmental actors, and so-called hacktivists with political agendas are increasingly the sources of these risks. As a result, the purpose of this study is to identify high-quality studies, assess their contributions, and to identify the cybersecurity threats impacts in the oil and gas industry. Therefore, the result shows that portable USB device, low employee awareness, and Outdated communication, control and monitoring system vulnerabilities and email hacks, ransomware, and phishing threats are the highest top three critical issue in oil and gas industrial information system. Finally, cybercriminals are becoming a bigger menace to the oil and gas industry. A successful breach has a hefty cost; thus businesses industry should act quickly to create robust security practices. It can discover emerging threats and implement secure systems by using a company-wide approach that fosters security as a design principle and collaboration among facilities.

Keywords:cybersecurity threats; threats impact; cyber threat management and risk mitigation; oil and gas industrial information system.