An extensive sector, this includes organisations engaged in and supporting the production, sale and distribution of energy. This includes research, exploration, extraction, refining and distribution. The industry includes operations that are either firmly within the critical national infrastructure, or involved in supporting it. The importance of the energy sector to the wellbeing of our economy and society also makes these organisations attractive targets to highly motivated threat groups.
The increase in Advanced Persistent Threat activity has been clearly seen in the energy sector, with instances of sector-specific malware and watering hole attacks on the rise. The state-sponsored nature of many of these threat groups means that their cyber espionage activities are well-funded, ongoing and sophisticated, so countering these threats requires a more holistic approach than simple technical controls.
As in all other sectors, the benefits and opportunities presented by modern networked communications systems have been embraced by the energy sector, particularly with the networking of large scale control and monitoring/data acquisition systems (SCADA systems) and the introduction of mobile technology. This has also extended to the consumer, with the imminent introduction of Smart Meters across every household in the UK. All these advances introduce huge benefits in improved efficiency, but also present potential risks to the security of critical information and systems and additional challenges surrounding the protection of customer data and maintenance of accurate and up to date information.
As a well-established security consultancy, Commissum is experienced in the full breadth of protective controls, and can provide expert assessment and tailored advice to ensure an appropriate means of controlling these risks.
How We Can Help You
We offer a range of services to industries across the Energy sector. Our expert advisory and assessment services will balance your business priorities with an understanding of your need to protect the continuity of your operations and your business critical intellectual property. In each case our services will be tailored to your specific requirements following in-depth discussion: