Oil Gas Infrastructure Security 2017 SUMMARY PRESENTATION Oil

  • Slides: 56
Download presentation
Oil & Gas Infrastructure Security 2017 SUMMARY PRESENTATION

Oil & Gas Infrastructure Security 2017 SUMMARY PRESENTATION

Oil & Gas Infrastructure Attacks

Oil & Gas Infrastructure Attacks

Scotia World Experience Oil & Gas Infrastructure Attacks § Mexico : Veracruz State –

Scotia World Experience Oil & Gas Infrastructure Attacks § Mexico : Veracruz State – IED Attack – Sept 2007. − Cost Mexican economy over US$200 million § Saudi Arabia : Abqaiq Oil Refinery, 300 km west of Riyadh - small arms attack – February 2006. − Oil prices immediately jumped by over $2 a Barrel. § Yemen : Marib Province - SVBIED attacks on two oil infrastructure targets – Sept 2006 − Attacks bore a close resemblance to the Abqaiq Saudi Arabia attacks. § Iraq : Al-Faw Peninsula, Basra Province - suicide small-boat attack – Oct 2002. − Pushed crude oil prices above $40 a barrel. § Yemen : Southeastern Hadramaut coast - suicide small-boat attack – Oct 2002. − Insurers underwriting traffic in the region Immediately trebled their rates. § Columbia : Rebels Pipeline some 950 times since 1986. − $2. 5 billion in lost revenues & Killed/injured over a 100 people. Oil & Gas Infrastructure Security

Oil & Gas Key Threats / Risks

Oil & Gas Key Threats / Risks

Potential Threats • § Global terrorism –Al Queda, Jameza Islam § Activists / pressure

Potential Threats • § Global terrorism –Al Queda, Jameza Islam § Activists / pressure groups § Single issue zealots / disgruntled • Disruptions to the supply chain employees • Theft / hijacking § Nuclear ambitions and political tension • Sabotage § Environmental effects • Maritime piracy Cyber attacks (e. g. on the process controls of oil application systems) Oil & Gas Infrastructure Security

Specific Challenges – Pipeline Security § Vulnerable to vandalism and terrorist attack § Computer

Specific Challenges – Pipeline Security § Vulnerable to vandalism and terrorist attack § Computer control systems used to monitor and manage pipelines may be “cyber-attacked” § Pipelines may be indirectly disrupted by other types of terror strikes § Pipelines supply fuel for all types of services and applications § Disruption of a pipeline network poses additional “downstream” risks and consequences Oil & Gas Infrastructure Security

Oil & Gas Threat & Risk Assessment

Oil & Gas Threat & Risk Assessment

Olive Group Risk Management Methodology Throughout the Risk Assessment process, there are two further

Olive Group Risk Management Methodology Throughout the Risk Assessment process, there are two further critical elements of the risk management process: − Communication and consultation with all relevant internal stakeholders to ensure the support of senior management and participation of relevant personnel − Monitor and review the process to ensure assessments and recommendations remain relevant in light of any changes in the context or risks Source: ASNZ 4360 ISO 27001 Oil & Gas Infrastructure Security

Risk Analysis § § Likelihood A function of the probability of a defined threat

Risk Analysis § § Likelihood A function of the probability of a defined threat being attracted to, and then exploiting security vulnerabilities of an asset. Risk Analysis Consequence is a function of the relationship between the criticality of the asset and the impacts should a the event occur. Impacts are both tangible and include but are not limited to impacts on: 1. People 2. Infrastructure 3. Function/ Operations 4. Reputation 5. Environment Oil & Gas Infrastructure Security

Olive Group Risk Assessment Capabilities § Risk Assessment to ensure any security recommendations are

Olive Group Risk Assessment Capabilities § Risk Assessment to ensure any security recommendations are fit for purpose and the associated mitigation measures reduce the real risks and represent cost effective and future proof solutions and are not merely "technology fixes". § Security Gap Analysis against a current risk assessment to either: a. Identify any gaps against an existing security plan based on current and perceived risks. b. Identify any gaps in the existing security measures based on current and perceived risks – the difference being the presence or lack of a "current" master security plan for the O&G facilities. § Security Recommendations: a. Close the identified gaps in the existing security plan with outline mitigation measures, that will lead to detailed design if required; or b. Form the basis of a facility Master Security Plan to ensure all security risks are reduced to as low as reasonably possible level - based on the NNPC risk appetite and risk framework; which again will lead to detail design of these measures if required. Oil & Gas Infrastructure Security

Oil & Gas Integrated Security Solution

Oil & Gas Integrated Security Solution

Requirements of Security Solution § Comprehensive solution addressing both commercial interests and national security

Requirements of Security Solution § Comprehensive solution addressing both commercial interests and national security needs § Commercially viable solution based on industry and government financing § Physical security of all pipelines from the point of origin to final destination § Able to integrate seamlessly with existing pipeline security measures § More complete knowledge of pipeline assets to assess risk, provide actionable intelligence and forensic capability § Provides real-time information to the authorized people who can act on it Oil & Gas Infrastructure Security

Achieving Long Term Security Objective and Vision Any security plan should be based upon

Achieving Long Term Security Objective and Vision Any security plan should be based upon a documented and approved security policy; which should include a long term security vision statement. Challenges to achieving the long term objectives should be reviewed and confirmed on a regular basis – i. e. during an annual review of the Security Threat and Risk Assessment. Olive Group can assist with this process. § § Any security solution must be achievable and sustainable; it will involve: A review of the existing security situation; including: − An update of the threat and risks assessment, − Gap analysis of existing and recommended security measures. § Implementation of agreed security mitigation measures; including: − Physical, Technical, and Procedural Measures. Regular review and maintenance of the security plans. § Olive Group can assist with all these processes. Oil & Gas Infrastructure Security

Long Term Security Vision Need to identify short to long term goals and Key

Long Term Security Vision Need to identify short to long term goals and Key Performance Indicators to achieving them as part of a strategic plan. Olive Group can help develop security goals and objectives in conjunction with NNPC Management to support the Security Management Planning time frames could be: 0 - 2 years, 5 – 10 years, 2 – 5 years, 10+ years. Oil & Gas Infrastructure Security

Convergent Technology Physical Protection § Land Underwater fences § Electrified barriers § Automatic gates,

Convergent Technology Physical Protection § Land Underwater fences § Electrified barriers § Automatic gates, doors and barriers Access Control § Biometrics – vascular scanning § Sensors and smart card technology Intrusion Detection § CCTV Surveillance, VMD, Analytics § Microwave movement detectors § Active/Passive infrared detection units § Integrated SCADA based detection system § Electrostatic field disturbance sensors § Seismic/Point vibration sensors § Microphonic cable fence disturbance systems § Sonar and radar People and Asset Monitoring § RFID, Sensors Communications § Wireless, Fibre, Cable Oil & Gas Infrastructure Security

Oil & Gas Security Technology

Oil & Gas Security Technology

DAY CONOPS Day/Night Camera C 2 15 KM Ground Surveillance Radar Self-Powered Surveillance Tower

DAY CONOPS Day/Night Camera C 2 15 KM Ground Surveillance Radar Self-Powered Surveillance Tower Ground Surveillance Vehicle 15 KM Keep Out Zone 500 M Red Alert Zone Oil & Gas Infrastructure Security

Airborne Surveillance Options All Assets Can Be Patrolled Irrespective of Terrain Oil & Gas

Airborne Surveillance Options All Assets Can Be Patrolled Irrespective of Terrain Oil & Gas Infrastructure Security

Strategic Threats Vulnerable Platforms at Sea Unmonitored Workers/pipes Vulnerable Towers Oil & Gas Infrastructure

Strategic Threats Vulnerable Platforms at Sea Unmonitored Workers/pipes Vulnerable Towers Oil & Gas Infrastructure Security

Local Accidental Hazards Land – Digging or construction work Maritime – Ships may founder

Local Accidental Hazards Land – Digging or construction work Maritime – Ships may founder onto undersea cables Oil & Gas Infrastructure Security

Airborne Deterrent in Use Elsewhere Helicopter Gunships Police MD 902 Oil & Gas Infrastructure

Airborne Deterrent in Use Elsewhere Helicopter Gunships Police MD 902 Oil & Gas Infrastructure Security

Patrol/Surveillance Types § VISUAL § THERMAL § DAYLIGHT VIDEO Oil & Gas Infrastructure Security

Patrol/Surveillance Types § VISUAL § THERMAL § DAYLIGHT VIDEO Oil & Gas Infrastructure Security

Visual Observation Pilot/Co Pilot Real Time Observation Oil & Gas Infrastructure Security

Visual Observation Pilot/Co Pilot Real Time Observation Oil & Gas Infrastructure Security

Thermal Imagery Including dense forest areas and overgrown waterways Oil & Gas Infrastructure Security

Thermal Imagery Including dense forest areas and overgrown waterways Oil & Gas Infrastructure Security

Daylight Video Night Time Surveillance is possible if required Oil & Gas Infrastructure Security

Daylight Video Night Time Surveillance is possible if required Oil & Gas Infrastructure Security

MARITIME/AIR ASSET INTEGRATION Onshore and Offshore Assets can be Covered Oil & Gas Infrastructure

MARITIME/AIR ASSET INTEGRATION Onshore and Offshore Assets can be Covered Oil & Gas Infrastructure Security

Surveillance Operations - India Oil & Gas Infrastructure Security

Surveillance Operations - India Oil & Gas Infrastructure Security

Insulator Washing - India Oil & Gas Infrastructure Security

Insulator Washing - India Oil & Gas Infrastructure Security

Surveillance Operations - Africa Oil & Gas Infrastructure Security

Surveillance Operations - Africa Oil & Gas Infrastructure Security

Unmanned Aerial Vehicles The Unmanned Helicopter Technology Made Simple Shared information/Imagery Oil & Gas

Unmanned Aerial Vehicles The Unmanned Helicopter Technology Made Simple Shared information/Imagery Oil & Gas Infrastructure Security

Airborne Surveillance: The Immediate Future UAV APPLICATIONS Oil & Gas Infrastructure Security

Airborne Surveillance: The Immediate Future UAV APPLICATIONS Oil & Gas Infrastructure Security

The Challenge: Detect and identifying all threats to buried pipes Pipeline protection solution must

The Challenge: Detect and identifying all threats to buried pipes Pipeline protection solution must have: § High Probability-of-Detection − All threats must be detected § Low Nuisance-Alarm-Rate − System must not alarm on detected events which aren’t a threat Oil & Gas Infrastructure Security

The Requirement: Distributed and persistent monitoring along the entire length of a pipeline Continuous

The Requirement: Distributed and persistent monitoring along the entire length of a pipeline Continuous sensor, close to pipeline Detect potential threats at sufficient lateral offset for action to be taken Independent information from every location § § § No blurring of information Multiple noise sources should not reduce sensitivity at other locations Sufficient range to span existing facilities Oil & Gas Infrastructure Security

The Solution: Fibre-Optic Distribute Acoustic Sensing Existing fibre cable (installed for control and telemetry)

The Solution: Fibre-Optic Distribute Acoustic Sensing Existing fibre cable (installed for control and telemetry) can be used as a microphonic cable − Sound can be ‘heard’ along the entire fibre length − No additional infrastructure required − The sense fibre is its own communications medium − No power distribution requirements − Very high sensitivity achievable − Additional acoustic processing provides a unique Detection, Classification and Localisation (DCL) capability − Threats can be identified from regular activity Oil & Gas Infrastructure Security

The Opta. Sense Solution Oil & Gas Infrastructure Security

The Opta. Sense Solution Oil & Gas Infrastructure Security

Opta. Sense converts standard optical fibre cable into a uniquely capable distributed acoustic detection

Opta. Sense converts standard optical fibre cable into a uniquely capable distributed acoustic detection system The theory An Interrogator Unit generates a special signal in a standard optical fibre – this signal is influenced by sound or ground borne vibrations and the IU “hears” these vibrations. What can it do? Opta. Sense is typically deployed on cables up to 40 km* long and is able to DETECT a disturbance to within 10 m along the length of the cable – effectively turning a standard telecoms fibre into an individual microphone every 10 m for its full 40 km length How is this useful? How is it used? Once programmed with the Acoustic Finger. Print™ data base, it can CLASSIFY and LOCATE the likely cause of the sound / vibrations and automatically send an alarm of a threat The Opta. Sense units are connected to one end of an existing fibre making it very cost effective to retrofit to existing linear asset environments. Information is displayed on a friendly graphical interface which also incorporates a “listen-in” mode to enable the user to actually hear what is going on at a particular location Oil & Gas Infrastructure Security

Opta. Sense is a cost effective solution to linear asset security and monitoring issues

Opta. Sense is a cost effective solution to linear asset security and monitoring issues Oil & Gas Infrastructure Security

Opta. Sense can use the optical fibre within an EXISTING cable deployed adjacent to

Opta. Sense can use the optical fibre within an EXISTING cable deployed adjacent to the pipeline In a typical situation Opta. Sense will use an optical fibre from within an existing telecoms or SCADA fibre-optic standard cable buried directly, or deployed in a duct adjacent to the pipeline Oil & Gas Infrastructure Security

At the operator workstations all the information is easily accessible under a windows environment

At the operator workstations all the information is easily accessible under a windows environment Oil & Gas Infrastructure Security

Alert information is shown on a simple to operate display Oil & Gas Infrastructure

Alert information is shown on a simple to operate display Oil & Gas Infrastructure Security

Also available are tools to visualise the activity along the fibre … Oil &

Also available are tools to visualise the activity along the fibre … Oil & Gas Infrastructure Security

… and some specialist tools to analyse the signals detected Oil & Gas Infrastructure

… and some specialist tools to analyse the signals detected Oil & Gas Infrastructure Security

Opta. Sense provides a sophisticated automatic processing and analysis capability An array of independent

Opta. Sense provides a sophisticated automatic processing and analysis capability An array of independent simultaneously sampled acoustic sensors enable advanced processing techniques to be applied High sensitivity and Signal to Noise Ratio § Provides a high probability of detection Signature categorization (finger printing) § Minimises nuisance alarms Data logging of all alarm events § Forensic analysis of activity leading up to an event Ability to correlate alarm co-ordinates with database information § Intelligent responses based on geographic information such as KP markers or Land ID numbers Oil & Gas Infrastructure Security

System implementation Oil & Gas Infrastructure Security

System implementation Oil & Gas Infrastructure Security

Schematic of a typical Opta. Sense installation along a long pipeline Oil & Gas

Schematic of a typical Opta. Sense installation along a long pipeline Oil & Gas Infrastructure Security

Alert information can also be made available on handheld devices Alert information can be

Alert information can also be made available on handheld devices Alert information can be transmitted to handheld devices over wireless infrastructure Security personnel can automatically receive the following information: § § § Location of detected alert Route from current position to location of the detected alert Audio stream of the activity at the location of the detected event Oil & Gas Infrastructure Security

In addition to detecting Third party Interference we are exploring additional functionality of Opta.

In addition to detecting Third party Interference we are exploring additional functionality of Opta. Sense Using a fibre-optic cable deployed alongside a pipeline, with Opta. Sense it is also possible to: § § Detect high pressure pipeline leaks Monitor, in real time, the progress of a PIG though the pipeline Provide Perimeter Intruder Detection (PID) at in-line facilities Provide remote condition monitoring of rotating machinery at in-line facilities Oil & Gas Infrastructure Security

Lab test of leak detection capability Acoustic sensitivity of the Opta. Sense solution enables

Lab test of leak detection capability Acoustic sensitivity of the Opta. Sense solution enables the immediate identification of leaks In lab tests Opta. Sense has demonstrated the ability to instantly detect a 10 Bar leaking through a 1 mm nozzle This technique can be used to compliment existing Distributed Temperature Sensing (DTS) leak detection techniques Oil & Gas Infrastructure Security

Real time monitoring of PIG position By monitoring the fibre adjacent to the pipe,

Real time monitoring of PIG position By monitoring the fibre adjacent to the pipe, Opta. Sense is able to provide real time monitoring of the PIGs progress through a pipe. This shows the track of a cleaning PIG through a HP buried gas pipeline. This was detected on a ducted telecoms cable laying adjacent to the pipe Oil & Gas Infrastructure Security

Fibre Optic Solution Summary Range – Single System: 40 km range Frequency response <1

Fibre Optic Solution Summary Range – Single System: 40 km range Frequency response <1 Hz to >1 k. Hz Positional Accuracy: 10 m resolution Performs signature (finger print) recognition Independent data from all 4, 000 locations simultaneously − Each independently configurable Extremely sensitive: High Signal to Noise Ratio (SNR) Requires only one fibre − can use existing ‘dark’ fibre Can also be used for: − leak detection; condition monitoring; PIG tracking Detects multiple disturbances, with… − No degradation of sensitivity − No degradation of locate accuracy Real-time audio output: listen to threats Oil & Gas Infrastructure Security

Oil & Gas Our Experience

Oil & Gas Our Experience

Conceptual Integrated Operation INTEGRATED SECURITY SYSTEM CAPABILITY GROUND / SEA SURVEILLANCE AIRBOURNE / SEA

Conceptual Integrated Operation INTEGRATED SECURITY SYSTEM CAPABILITY GROUND / SEA SURVEILLANCE AIRBOURNE / SEA SURVEILLANCE GROUND / SEA SENSORS SECURE COMMUNICATIONS MOBILE COMMAND CENTERS DECISION SUPPORT SYSTEM C 4 i OPERATIONS & MANAGEMENT Oil & Gas Infrastructure Security

Scotia’s experience is diverse and includes the following related projects: § QP Ras Laffan

Scotia’s experience is diverse and includes the following related projects: § QP Ras Laffan Port Expansion, Qatar - Design, Supply & Install a Comprehensive Security System § Shuiaba Oil and Gas Industrial Area (SIA), Kuwait Security Review § Ma’aden (Saudi Arabian Mining Company) Security & Safety Master Plan § QP Ras Laffan City – Seawater Cooling Plant Phase 2 - Supplied, Installed & Commissioned Total Security Solution § BP Kuwait – Proposed New Venture – Kuwait Northern Oil Field Master Security Plan § Abu Dhabi National Oil Company − Corporate Security Master Plan − Das Island/Offshore Pipeline Network Security Plan (ISPS Compliant) Oil & Gas Infrastructure Security

Nigeria Oil & Gas NNPC – Olive Group Auditing Capabilities

Nigeria Oil & Gas NNPC – Olive Group Auditing Capabilities

Scotia World Auditing Capabilities. Olive Group are experienced in the execution of diverse security

Scotia World Auditing Capabilities. Olive Group are experienced in the execution of diverse security audits, covering both onshore and offshore oil and gas installations; including: § Physical security compliance with Security Management Plans and International and OGP standards § Security designs and plans; including Emergency Response Plans § ERP training and exercising; where necessary this can include training and exercises to address gaps § IT Security § Compliance with international security standards e. g. Voluntary Principle Security and Human Rights § Security manning reviews § Security contract compliance and effectiveness Oil & Gas Infrastructure Security

Questions ? Oil & Gas Infrastructure Security

Questions ? Oil & Gas Infrastructure Security