The complete paper presents an integrated view of three key areas of knowledge that are typically addressed individually—cybersecurity, process safety, and human factors—from the perspective of cybersecurity. It discusses information technology (IT) and operations technology (OT) dimensions during the phases of a project: engineering design, procurement, construction and assembly, commissioning, and operation. It also proposes a strategy for implementing such an approach in the oil and gas industry.
Introduction
With the aim of forming a holistic safety and security vision, the authors propose a unified analysis integrating cybersecurity, process safety, and human factors, focusing on their interfaces and opportunities presented by risk analysis and the convergence of business procedures. This is referred to in the proposed approach as a high-level integration layer, or the “strategic (outer) circle.” The combination of two concentric circles—strategic (outer) and operational (inner)—forms what the authors term a 360° approach.
The Strategic (Outer) Circle
The outer circle illustrates the strategic-level interfaces between key processes of cybersecurity, process safety, and human factors from a cybersecurity perspective.
Cybersecurity/Process Safety Interface.