Consequence-Based Risk Matrices for IEC 62443-3-2
Andrew Ginter shares a proposed IEC 62443-3-2 Appendix C: consequence-based risk matrices that replace likelihood with credibility for high-impact OT cyber attacks.
October 6, 2026
Category: Oil and Gas
Welcome to the resources page! We have compiled a collection of useful information, tools, and resources to help you
TSA NOPR for Pipelines, Rail & Bussing – Enhancing Surface Cyber Risk Management
The TSA Notice of Proposed Rulemaking for Enhancing Surface Cyber Risk Management is out. This is the long-awaited regulation that replaces the temporary security directives issued after the Colonial Pipeline incident.
November 26, 2024
Upstream / Midstream / Downstream Cyber Attacks – Dependency Analysis
It turns out that there are really only three ways that ransomware can shut down OT networks and physical operations: “abundance of caution” shutdowns, OT dependencies on IT systems and services, and ransomware impacting OT networks and systems directly.
July 9, 2024
Recorded Webinar: Cyber-Informed Engineering Transforms IT/OT Convergence in Oil & Gas Operations
Webinar recording of Kevin Rittie, Andrew Ginter, and Alan Acquatella introducing a new approach for solving the long standing challenge of safely and securely converging IT and OT networks in an Oil & Gas operation.
March 4, 2024
Cybersecurity in the AVEVA Enterprise SCADA Product – Going Deep | Episode 122
From supply chain to Active Directory to segmentation designing security into ICS products is hard. Jake Hawkes walks us through how security gets built into AVEVA Enterprise SCADA.
February 29, 2024
Checklist: 9 Best Practices to Safeguard Upstream Oil & Gas Operations from Cyber Attacks
Upstream Oil & Gas production has a unique range of threats and risks to consider when compared to other industrial operations.
Our checklist infographic takes a dive into what to consider and secure when it comes to Upstream operations.
February 14, 2024
How to Properly Cyber Secure an Upstream Oil & Gas Operation
The Waterfall Unidirectional Security Gateway and how it has been applied at Oil & Gas production sites such as oil fields and offshore platforms.
February 13, 2024
Cyber-Informed Engineering Transforms IT/OT Convergence in Oil & Gas Operations
IT/OT integration introduces threats to reliable operations. Connected networks move both data, malware, and remote-control cyber attacks along their wires and cables. In the Oil & Gas industry, E&P, pipelines, and refineries have found that securing IT/OT connections involves more than just having Enterprise Security telling Engineering what to do and Engineering saying “no” to IT over and over.
February 1, 2024
Keeping the Flow: Cyber-Proofing Oil & Gas Production
In our everything-goes-digital era, the upstream Oil & Gas (O&G) industry finds itself at the crossroads of innovation and vulnerability. Securing O&G operations goes beyond the frameworks commonly addressed in IT security.
January 25, 2024
