Fears have been raised that efficiency savings made amid the oil and gas downturn could be leaving firms open to cyber security attacks.
Dorian Hindmarsh, business development manager at Proeon Systems, made the claims yesterday as he was set to discuss the matter at the Southern North Sea Conference in Norwich before it was cancelled due to bad weather.
Proeon, which has a base in Aberdeen, designs, installs and commissions safety systems for the energy sector.
Mr Hindmarsh said recent savings in maintenance and a “reluctance” to adopt new technology has left operators at a disadvantage when it comes to automated systems in pipelines and nuclear plants.
He said: “The North Sea has often been focusing on reduction of cost more recently, which is quite probably the best thing to do. The costs offshore were significant in a competitive market so reducing them was a good idea. However, they may well have overlooked a few things.
“One of the things that we’re aware of is that maintenance felt the squeeze. That might well have opened up gaps to perhaps not being the most up to date in software and hardware terms – maybe allowing things to be slipped through processes. A good management team must be aware that as they produce more – and become more profitable – they become more of an attack target.
“The North Sea is not dead yet. They are still finding new reserves, but there seems to be a reluctance to adopt the latest technology unless it has been done before or proven before. Old tech is one of the easiest places to start targeting because it doesn’t have the security built around it. With more modern technology and equipment, you can build security barriers through it.” Last month, Ciaran Martin, head of the National Cyber Security Centre, said UK firms in charge of critical infrastructure could face a “crippling” attack within two years.
Mr Hindmarsh said it was crucial that automated systems have the most up-to-date software available to prevent such incidents.
He added: “Whether you’re doing power distribution, running a nuclear plant, an oil platform or pulling gas back to shore, they are autonomous systems and they are often remotely accessed and controlled.
“These are the fabric and infrastructure of how our country and other countries function, and are just as much at risk as a laptop in a banking institute – in fact more so.”
