Sector
Oil & Gas
Upstream, midstream and downstream operations with distributed assets, hazardous processes and heavy safety instrumentation.
modbus-tcpdnp3hartfoundation-fieldbusopc-ua
Typical architecture
Distributed RTU/flow computers over wide-area links to a central SCADA, with plant DCS/SIS environments segmented behind an industrial DMZ.
At a glance
SystemsDCS, SIS, RTU, SCADA, Flow computers, Compressor controls
VendorsEmerson, Honeywell, Yokogawa, Schneider Electric
Why should I care?
Sector context decides consequence. The same vulnerability carries a different risk in a substation, a treatment plant and a packaging line — prioritise on physical outcome, not CVSS alone.
Key processes
- Wellhead production
- Pipeline transport
- Refining units
- Terminal loading
- Custody transfer
Safety considerations
- Fire and gas systems
- Overpressure protection
- Safety instrumented functions with defined SIL targets
Availability requirements
- Multi-year turnaround cycles limit patching
- Unplanned shutdowns are extremely costly
Threat patterns
- Business-system ransomware affecting operations decisions
- Safety system targeting
- Remote site connectivity exposure
Relevant incidents
- triton
- colonial-pipeline