How OTORIO’s OT Cyber Security Risk Assessment Enhanced an Energy Company’s Operational Security Posture

A Brief Overview

The company is an international oil and natural gas refining company that sells a wide variety of products to businesses and consumers. It also has a large network of retail gas stations and distribution terminals around the world to deliver energy products and services to its customers.

The company trusted OTORIO and its OT-native security experts to evaluate what ramifications the crisis had on its OT environments and operations. It sought a realistic level of acceptable risk, exposure, and vulnerabilities for the company’s operational network and business environments.

Customer Challenges

The company had been relying upon an intrusion detection system (IDS), but struggled with several challenges. Its security posture led to only a partial understanding of the impact that OT security hason its operations, and it lacked the ability to proactively assess and mitigate risks. Despite the energy company’s investment in cyber security generally, and OT security with some resilience, OTORIO’s OT risk assessment still found significant issues.

OTORIO’s Solution

OTORIO’s team assessed the company’s security posture from a cyber attacker’s point of view. This involved both an external assessment, leveraging OTORIO’s vast experience with industrial and operational penetration testing by red and purple teams. In parallel, the teams reviewed internal security operations, controls, and identified attack vectors. OTORIO also focused on analyzing IT to OT risks and attack paths.

OTORIO’s OT cyber security services and products provided an integrated evaluation of the organization’s true exposures, controls, posture, and vulnerabilities, while also revealing the operational impact this had upon the company.

Discover how OTORIO can enhance your oil and gas cybersecurity posture.