> CyberPrism - Case Study
CyberPrism Delivers Comprehensive Cyber Security Management System and IEC62443-3-2 Risk Assessments for Oil & Gas Operator’s Industrial Control Systems
> The Challenge
This well-known energy operator invited CyberPrism to provide Industrial Control Systems Cyber Security support to its entire Operational Technology (OT) estate, including its offshore platforms and the oil receiving terminal, in parallel with a holistic, enterprise-level industrial control systems cyber security life cycle management plan.
> Our Solution
CyberPrism worked closely with this well-known energy company’s technical team, starting with offshore and onshore site surveys to verify system details including connectivity information: this in turn allowed us to generate asset registers and industrial control systems architecture drawings.
Based on this information, CyberPrism has conducted industrial control systems cyber security assessments of each site based on ISA/IEC 62443 ZCRs 1-3.
Over the course of the project, we delivered a disaster recovery plan based on the assets’ business impact assessments, in conjunction with the IT-based disaster recovery and cyber incident response plans, with additional input from the Client’s IT cyber security processes and procedures.
We are now engaged in detailed site risk assessments, based on ISA/IEC 62443 ZCRs 4-7, and have delivered a set of Statements of Requirement for future infrastructure upgrades.
CyberPrism will also work up the Client’s CAF-based annual statement to the Health and Safety Executive by January 2025.
> Outcomes
CyberPrism Guard will protect the entire Historian network and data flow process.
It will prevent the ingress of malware from connected IT networks and will alert the IACS Responsible Person of any suspicious activity by internal or third-party users. With CyberPrism Guard your sensitive data will be protected from exfiltration or unauthorised viewing, whilst continuing to provide access to authorised users with the correct permission set.