Oil and Gas Industry Accounted for 25% of Victims in June’s NotPetya Ransomware Attack; Frequency of Incidents Growing by
350% Year on Year
ADIPEC 2017’s Security in Energy Conference Will Focus on Strategies to Mitigate Cyber Crime Risks and Deploy Defence Mechanisms to Protect Critical Industry Systems and Infrastructure
Abu Dhabi, UAE – 03 October 2017 – Organisers of the second annual Security in Energy conference, to be held in Abu Dhabi in November, say that oil and gas has been exposed as a prime target for cyber criminals after the industry was singled out during international ransomware attacks.
Co-located within the Abu Dhabi International Petroleum Exhibition and Conference (ADIPEC), Security in Energy recognises the increasingly critical importance of IT systems to oil and gas operations, and follows two major ransomware attacks in the first half of 2017.
The second of these, the NotPetya attack at the end of June, appears to have specifically targeted oil and gas companies. According to analysis by Kaspersky Labs, just three business sectors accounted for around 80 per cent of targets. Oil and gas accounted for around 25 per cent, a close second to the finance sector, and just ahead of manufacturing.
“Cybercrime is a serious problem for any business, but recent incidents raise concerns that oil and gas companies will be high-priority targets for attacks,” said Christopher Hudson, President – Global Energy at dmg events, which organises ADIPEC in partnership with Abu Dhabi National Oil Company (ADNOC). “The Security in Energy conference provides a robust discussion specific to the needs of this industry, helping companies ensure that strong defences are in place.”
Recent reports predict the Middle East cyber security market will grow from US$11.38 billion in 2017 to US$22.14 billion by 2022. ADIPEC’s Security in Energy Conference delivers the latest market intelligence in energy security protocols, and places a spotlight on the best innovations, security practices and crisis planning within the industry.
Specific conference sessions will cover key topics in cyber security, including ransomware; the internet of things (IoT); the convergence of operating technology and IT; security and compliance risks in cloud computing; risk management for supply chain and business continuity and the use of big data and analytics. Keynote addresses will focus on the balance between investment and risk, and the impact of regional collaboration on oil and gas security, with discussions to include both defensive and offensive approaches to security.
The conference programme is planned to offer immediate relevance to oil and gas. For example, there will be a significant discussion of threats to critical infrastructure, where attacks could cause widespread operational disruption and safety risks. It will offer insights into and front-line protection strategies, whether for new systems, or by retrofitting of existing industrial control systems to build secure and resilient operations.
There will also be a dedicated Security in Energy zone within the ADIPEC exhibition halls.
“Illicit cyber activity is here to stay,” said Don Randall, Former Head of Security and Chief Information Security Officer for the Bank of England, who will be sharing his expertise during the conference. “But understanding the motivation of the perpetrators, with appropriate responses and education, can substantially reduce the risk and harm.”
The list of speakers will feature leading figures from organisations tasked with tackling cybercrime in the Middle East, including Ahmed Alshemaly, Director, Cyber Defense Centre, National Electronic Security Authority (NESA), United Arab Emirates; Eng. Ibrahim AlShamrani, Executive Director of Operations, National Cyber Security Center, Ministry of Interior, Saudi Arabia; and Mohammed Bushlaibi, Forensic Analyst, Telecommunications Regulatory Authority (TRA), United Arab Emirates. They will speak alongside renowned international experts.
According to Accenture’s High Performance Security 2016 Report, 96 cyberattacks were reported over 12 months by oil and gas company heads, while 55 per cent of oil and gas leaders say the need to fill cybersecurity gaps in end point or network security is their most pressing concern. The Cisco 2017 Annual Cybersecurity Report estimates that the frequency of ransomware attacks is growing by around 350 per cent each year. The tools to conduct an attack are easy to obtain and easy to use. Ransomware is even available as a software-as-a-service subscription.
While the number of attacks is increasing, there are concerns that some oil and gas companies have reduced their security budgets as they struggle to balance cost and risk at a time when finances are under pressure, leaving themselves dangerously exposed. The Security in Energy conference sessions will aim to bridge this awareness gap, emphasise the importance of building a solid defence platform against cyber-attacks and understanding the fallout of an attack and its implications to business.
"Cybercrime is a threat to the global economy,” said Sandip Patel, QC, a UK-based lawyer and leading international expert on prosecuting cybercrime cases in court, and one of the speakers at the Security in Energy conference. “Some estimates cost it at more than 445 billion dollars, but the true cost is far greater as many countries do not report on this."
By co-locating security within ADIPEC, one of the world’s most important strategic gatherings for top global oil and gas executives, Security in Energy ensures that the integrity of systems is part of a broader discussion of industry issues.
A company’s security protocols are generally in the capable hands of the CIO/CISO. However, in order for the protocols to be 100 per cent understood and delivered, it is the priority of the entire organisation, from the top-down and bottom-up, to ensure a solid framework and delivery. Bridging the vocabulary gap between security professionals and their CEO’s and senior management teams is vital to ensure they are all aligned on the ever-present security risks to their organisation.
“Reducing cost and improving efficiency are important messages in oil and gas today, and many companies are investing in technology to reduce their costs,” said Christopher Hudson. “Keeping that technology safe and secure needs to be a number one priority. It needs to be as much a concern for the Chief Executive Officer as it is for the Chief Information Officer.
“Security in Energy recognises that this is a core issue for a modern business, and cannot be pushed into a departmental silo.”
Held under the patronage of His Highness Sheikh Khalifa Bin Zayed Al Nahyan, President of the UAE, hosted by the Abu Dhabi National Oil Company (ADNOC), and organised by the Global Energy division of dmg events, ADIPEC is one of the world’s leading oil and gas events, and the largest in Africa and the Middle East.
ADIPEC will be held at Abu Dhabi National Exhibition Centre from 13 to 16 November 2017, with the Security in Energy Conference to be held on 14 and 15 November.
- ENDS –
Held under the patronage of the President of the United Arab Emirates, His Highness Sheikh Khalifa Bin Zayed Al Nahyan, and organised by the Global Energy division of dmg events, ADIPEC is the global meeting point for oil and gas professionals. Standing as one of the world’s top energy events, and the largest in the Middle East and North Africa, ADIPEC is a knowledge-sharing platform that enables industry experts to exchange ideas and information that shape the future of the energy sector. The 19th edition of ADIPEC 2016 took place from 7-10 November at the Abu Dhabi National Exhibition Centre (ADNEC). ADIPEC 2016 was supported by the UAE Ministry of Energy, Masdar, the Abu Dhabi National Oil Company (ADNOC), the Abu Dhabi Chamber, and the Abu Dhabi Tourism & Culture Authority (TCA Abu Dhabi). dmg Global Energy is committed to helping the growing international energy community bridge gaps by bringing oil and gas professionals face to face with new technologies and business opportunities.
For media enquiries, please contact:
Senior Marketing Manager, DMG Events Global Energy
Twofour54, Park Rotana Offices, 6th Floor
PO Box 769256, Abu Dhabi, UAE
T: +971 (0)2 6970 515
T: +971 4 275 4100
Mark Robinson (English): +971 (0)55 127 9764
Feras Hamzah (Arabic): +971 (0)50 798 4784
Something interesting to share?
Join NrgEdge and create your own NrgBuzz today
We are excited to bring together the first ever Caribbean Oil & Gas Virtual Summit-2020 to be held from 16th - 18th September 2020.
Due to the current situation, this event is aimed at keeping the region's Oil & Gas community connected virtually and present an excellent networking opportunity all from the comfort of your office/home without the need to travel in these challenging times. There will also be a dedicated Virtual Exhibition focusing on the Operators, Prime Sub Contractors, Governments, Associations as well as the wider regional and international Oil & Gas Community with a particular focus on Guyana, Suriname and Trinidad.
The Conference & Virtual Expo would feature Suriname, Guyana, Bahamas, Barbados and Trinidad and participants from around the globe would present thought provoking keynotes, oral and poster presentations; displays of services, technology and investment opportunities will be available for both national and international companies.
You can also check the website www.carivs.com for further updates. We are expecting around 200 companies to be part of this conference. Both the Website and the Brochure will keep getting updated in coming days with further information about Speakers, Exhibitors, Sponsors, Content, Agenda etc.
Also I have attached a dropbox link. You will get access to the event platform through this link. This is in order for you to get an understanding of how the event platform works.
Let me know if you have any questions in the meantime
Source: U.S. Energy Information Administration, Weekly Petroleum Status Report
Recent declines in demand for petroleum products have led commercial crude oil inventories in the United States to reach an all-time high of 541 million barrels as of the week ending June 19, which is 5 million barrels more than the previous record set in late March 2017, according to data in the U.S. Energy Information Administration’s (EIA) Weekly Petroleum Status Report.
Source: U.S. Energy Information Administration, Weekly Petroleum Status Report
Commercial crude oil inventories do not include crude oil held in the U.S. Strategic Petroleum Reserve, which totaled 654 million barrels as of June 19. Total commercial crude oil inventories include volumes held at refineries and tank farms, as well as some amount of pipeline fill (crude oil held in pipelines) and stocks in transit by water and rail. When estimating storage capacity utilization, EIA removes the pipeline fill and stocks in transit so that utilization reflects the stocks held at refineries and tank farms as a percentage of working storage capacity.
Source: U.S. Energy Information Administration, Weekly Petroleum Status Report
To help stakeholders better assess crude oil storage and capacity, EIA provides weekly estimates of U.S. and regional crude oil storage capacity utilization in the Weekly Petroleum Status Report (WPSR). EIA’s most recent Working and Net Available Shell Storage Capacity Report was released on May 29, 2020, with data as of March 31, 2020. In this update, net available shell storage capacity in the United States increased by nearly 19 million barrels from the previous estimate as of the end of September 2019. An increase in Gulf Coast storage capacity offset relatively small changes in other regions.
As of June 19, U.S. net commercial crude oil inventories were at 62% of total available storage capacity. The majority of capacity and inventories are located in the Gulf Coast, a region which is also home to the majority of U.S. refining capacity and a key area for exporting crude oil. Total commercial Gulf Coast crude oil inventories have increased by 64 million barrels since March 13, when a national emergency was declared in the United States, and are now at an all-time record of 308 million barrels.
Crude oil storage capacity utilization in Cushing, Oklahoma, had increased to 83% of capacity as of the week ending May 1, but it declined to 58% on June 19. Storage considerations were among the reasons that West Texas Intermediate (WTI) crude oil prices—which are based on physical delivery of WTI crude oil at Cushing, Oklahoma—briefly dropped below zero on April 20 and April 21.
The sale of a mere 5% stake in the oil world’s crown jewel, Saudi Aramco had captured the attention of the entire investment community last year. Pushing through after years of debate and delays, the sale on the Tadawul stock exchange valued Aramco at a whopping initial US$1.6 trillion. Investors were mainly connected Saudi individuals and wealthy families, with international buy-in limited as a planned parallel listing on the London or New York Stock Exchange fell through. Still, the deal was enough to unleash several thousand pages of speculation and opinion over potential liberalisation of the oil and gas complex in the Middle East, especially the upcoming post-oil and carbon-neutral environment.
Aramco may have captured all the main headlines, especially with its huge acquisition of fellow Saudi jewel SABIC but the true entity pushing the boundaries of privatisation and deregulation in the Middle East is elsewhere. Specifically, just east of Saudi Arabia, in Abu Dhabi – the largest and most influential of the seven emirates that make up the UAE.
The latest headline involving ADNOC, Abu Dhabi’s state oil firm, hasn’t really made the rounds beyond the industry’s eyes but it is crucial to understanding how the Middle East oil sector could adapt to the changing industry over the next few decades. Partnering with a consortium of six investors, ADNOC has sold a 49% stake in its ADNOC Gas Pipeline Assets subsidiary, retaining a 51% majority stake and control. The sale had been bandied around for over a year, seen as a sign of a gradual opening of a tightly controlled oil and gas region, and follows three other significant sales involving ADNOC. The first was in 2017, when ADNOC raised nearly a billion US dollars through an IPO of its fuels distribution unit on the Abu Dhabi Securities Exchange, offering up 10% of its shares. Then late 2019, ADNOC partnered with Italy’s Eni and Austria’s OMV to nearly double oil refining capacity in Abu Dhabi to 1.5 mmb/d – the largest foreign participation in the Middle East downstream industry since the Shell Pearl GTL project in Qatar and Total’s Jubail refining and petrochemicals push over a decade ago. Around the same time, ADNOC also pocketed US$4 billion from US investment giants BlackRock and KKR through the sale of a 40% stake in its ADNOC Oil Pipelines subsidiary. And now it is the turn of ADNOC’s gas pipelines.
The chronology and regional aspect of ADNOC’s moves is interesting. While Aramco looks local, Abu Dhabi went abroad. The refining expansion involved established oil market players, Eni and OMV – and parallels a gradual unbundling of Abu Dhabi’s upstream concessions, where stakes have been offered to Total, PetroChina, Eni, Cepsa and India’s ONGC over the past five years. But the choice of new investors are now not from the industry. After the deep-pocketed BlackRock and KKR, ADNOC has once against turned to institutional investors for its latest, and largest, sale, with the US$20.7 billion gas pipeline and infrastructure deal going to a consortium consisting of Global Infrastructure Partners (GIP), Brookfield Asset Management, Ontario Teacher’s Pension Plan Board, Singapore’s GIC sovereign wealth fund, NH Investment and Securities and Italy’s infrastructure operator SNAM. ADNOC called the deal a ‘landmark investment (that) signals continued strong interest in ADNOC’s low-risk, income-generating assets’. But it also illustrates two other points: institutional interest in strategic Middle East assets and the challenging environment within the industry because of Covid-19 that has led investment interest expanding to new capital that is currently reluctant to make risky bets in an unstable economic environment. So the choice of ADNOC’s safe assets and a captive domestic market is rather attractive.
ADNOC’s strategy differs from Aramco’s fundamentally. Where Aramco sold a stake of itself, ADNOC has parcelled out different parts of itself while keeping control of the main body intact. This is what Malaysia’s Petronas has done to a great degree of success, listing subsidiaries through IPOs and partnering with foreign investors on upstream/downstream projects, using the proceeds to finance a global expansion that now stretches across all continents. Replicating this strategy, as ADNOC looks to be doing, could pay dividends, particularly since ADNOC has a wider domestic base, as well as stronger export markets, than Petronas. Between Saudi Aramco and ADNOC, the OPEC duo seems to have kickstarted a liberalisation drive within the Middle East energy complex. Kuwait Petroleum and Bahrain’s BAPCO are already reported to be considering similar moves. Which model could this second wave follow: Aramco’s or ADNOC’s? Aramco’s is a shock-and-awe move, a potential wow factor at the size of any possible deal. But ADNOC’s more piecemeal approach could actually be far more stable and sustainable over time.
End of Article
In this time of COVID-19, we have had to relook at the way we approach workplace learning. We understand that businesses can’t afford to push the pause button on capability building, as employee safety comes in first and mistakes can be very costly. That’s why we have put together a series of Virtual Instructor Led Training or VILT to ensure that there is no disruption to your workplace learning and progression.
Find courses available for Virtual Instructor Led Training through latest video conferencing technology.