Control system disruption
Loss of process visibility or control, with production, safety and environmental consequences priced into loss magnitude.
Home/Industries/Energy, oil and gas
Sector pack
Energy, oil and gas
Two estates with different physics. Corporate IT is governed like any large enterprise; the operational technology estate is governed against national OT controls, safety consequences and a supply chain that increasingly carries its own mandated cyber requirements.
- SECTOR PACK ADDS
- Regulation, loss scenarios, indicators and control emphasis
- SCENARIOS IN THIS PACK
- 6 quantifiable loss scenarios
- BUILT ON
- The same control library and the same five pillars
What makes this sector different
The platform does not change. The regulation, the scenarios and the emphasis do.
- National OT controls now have deadlines. Operational technology control sets in this region are prescriptive and examined, not advisory.
- Operators impose requirements on suppliers. Major national operators run third-party cyber certification schemes, and a supplier without one loses the contract.
- Convergence is the exposure. The interface between corporate IT and industrial control is where most realised incidents in this sector begin.
- Vendor remote access is standing, not exceptional. Maintenance access into control environments is often permanent, poorly evidenced and rarely reviewed.
- Safety consequences change the maths. Loss magnitude includes environmental, safety and regulatory outcomes, not only downtime.
Regulation and standards in scope
Indicative, and additional to the market pack for the jurisdictions you operate in. Applicability is confirmed per client during scoping.
- NCA OTCC-1:2022
- IEC 62443
- NCA ECC-2:2024
- NCA CSCC
- UAE Information Assurance Standards
- Operator-mandated supplier cyber certification schemes
- NIST CSF 2.0
- ISO 22301
- NCEMA 7000
- ISO/IEC 27019 where adopted
Loss scenarios in the sector pack
Each arrives with FAIR parameters and calibration guidance, so it can be quantified in USD rather than described.
IT to OT lateral movement
A corporate compromise reaching the industrial estate through a converged interface or a shared identity path.
Vendor remote access compromise
Standing maintenance access used as the entry route, with containment complicated by contractual arrangements.
Supply chain certification failure
Loss of a supplier certification blocking work on an operator contract — commercial loss rather than technical.
Ransomware forcing precautionary shutdown
Production halted because segregation between the corporate and industrial estates could not be demonstrated quickly.
Safety instrumented system interference
The scenario with the highest consequence and the lowest tolerance, modelled explicitly rather than assumed away.
Where the emphasis falls
OT asset inventory, zone and conduit position and remote access control in the asset master; OT control compliance in Comply; safety and environmental consequence modelling in the FAIR scenarios in Anticipate; and supplier certification tracking in third-party risk.
How sector packs sit in the architecture · How it reaches the business