MAR Consulting performed a cyber-security assessment of a floating, production, storage and offloading (FPSO) vessel operating in the Norwegian Continental Shelf (NCS). The methodology used was similar to previous studies delivered by MAR Consulting. Please refer to (1, 2, 3, 4) for further details on the methodology or feel free to contact us.
There were a number of key findings. Specifically, regarding interfaces between different systems; culture and awareness surrounding cyber-security; and potential backdoors to some IT/OT systems in the vessel. It was shown that the most critical control and automation process equipment were protected with several layers. Inherent safety principles were not possible or practical to be implemented in all systems.
The methodology and outcome documentation has been subject to audits by the Petroleum Safety Authority (PSA). The findings are being followed-up by the operator to eliminate or reduce the cyber-security risk in the FPSO.