As Egyptian oil and gas downstream information technology has grown digitally over the past decade, security breaches against these digitally connected systems have also increased. These cyber security threats could have devastating effects on the operations and reputation of these companies. Preventing such cyberattacks is crucial. Especially, with the significance of the Egyptian oil and gas downstream sector to the local economy and the fact that many of these connected systems are sometimes managed remotely. This paper examines the value of the ISO 27001 standard in mitigating the effect of cyber threat and seeks to inspire decision-makers to the importance of the proactive measures to strengthen their organization’s cybersecurity posture and protect information critical assets. The study stresses the importance of improving the local educational system to bridge the gap between supply and demand for cybersecurity specialists by implementing a structured approach that emphasizes behavior modification to get a high return on investment in cybersecurity awareness.
Imran, H., Salama, M., Turner, C. and Fattah, S. (2021) A Systematic Literature Review on the Technical and Non-technical Cyber Risk Management Models in the Oil and Gas Sector. Economic and Social Development: Book of Proceedings, Varazdin, 3 June 2021. https://www.proquest.com/conference-papers-proceedings/systematic-literature-review-on-technical-non/docview/2545671144/se-2
Stergiopoulos, G., Limnaios, E., et al. (2020) Cyber-Attacks on the Oil & Gas Sector: A Survey on Incident Assessment and Attack Patterns. IEEE Access, 8, 128440-128475. https://ieeexplore.ieee.org/ielx7/6287639/8948470/09136701.pdf https://doi.org/10.1109/ACCESS.2020.3007960
Goncharov, E. (2022) ICS Cyberthreats in 2023—What to Expect. Kaspersky ICS CERT. https://ics-cert.kaspersky.com/publications/reports/2022/11/22/ics-cyberthreats-in-2023-what-to-expect
Mehan, J. (2014) Cyberwar, Cyberterror, Cybercrime and Cyberactivism (2nd Edition): An In-Depth Guide to the Role of Standards in the Cybersecurity Environment. IT Governance Ltd., Ely. https://ebookcentral.proquest.com/lib/UNICAF/reader.action?docID=1778762&ppg=183
Carmony, M. (2020) Analyzing Cybersecurity Risks within Critical Infrastructures: Threats and Challenges in the Oil and Gas Industry. ProQuest Dissertations, Utica College, Utica. https://www.proquest.com/dissertations-theses/analyzing-cybersecurity-risks-within-critical/docview/2485483134/se-2
Polyakov, A. (2016) Oil and Gas Security. Infosec Institute, Elmwood Park. https://resources.infosecinstitute.com/oil-and-gas-cyber-security-101
Ahmed, A. (2022) Egypt among 20 Most Vulnerable Countries to Cyberattacks. Daily News. https://dailynewsegypt.com/2022/09/27/egypt-among-20-most-vulnerable-countries-to-cyber-attacks-ntra
Ahmed, F. (2020) El Molla: Petroleum Sector Contributes 27% of GDP. Egypt Oil & Gas. https://egyptoil-gas.com/news/el-molla-petroleum-sector-contributes-27-of-gdp
Kosmowski, K.T., Piesik, E., Piesik, J. and Śliwiński, M. (2022) Integrated Functional Safety and Cybersecurity Evaluation in a Framework for Business Continuity Management. Energies, 15, 3610. https://doi.org/10.3390/en15103610
Lewis, L.D., Morris, L.D. and Simpson, N.O. (2020) Managing Cyber Security for the Downstream Oil and Gas Industry. CIO Magazine. https://www.cio.com/article/3523699/managing-cyber-security-for-the-downstream-oil-and-gas-industry.html
LogRhythm (2022) The State of the Security Team. https://gallery.logrhythm.com/analyst-reviews-and-reports/logrhythm-na-the-state-of-the-security-team-research-report-2022.pdf
Nozomi Networks (2022) OT/IoT Security Report a Deep Look into the ICS Threat Landscape. https://www.nozominetworks.com/downloads/Nozomi-Networks-OT-IoT-Security-Report-2022-2H.pdf
Herve, P. (2022) Securing Pipeline Endpoints against Rising Global Threats. Pipeline & Gas Journal, 249, 64. https://www.proquest.com/trade-journals/securing-pipeline-endpoints-against-rising-global/docview/2673380472/se-2
Progoulakis, I., Nikitakos, N., Rohmeyer, P., Bunin, B.A., Dalaklis, D. and Karamperidis, S. (2021) Perspectives on Cyber Security for Offshore Oil and Gas Assets. Journal of Marine Science and Engineering, 9, 112. https://doi.org/10.3390/jmse9020112
Gurbani, V.K. (2019) Cyber Security Management System: A Review of Literature. International Journal of Engineering Research & Technology, 8.
Howard, S. and Wallaert, T. (2015) Improving Cybersecurity Defenses in Oil and Gas Applications. Pipeline & Gas Journal, 242, 46-48. https://www.proquest.com/trade-journals/improving-cybersecurity-defenses-oil-gas/docview/1654945948/se-2
Amran, A., Deilami, A. and Benlamri, R. (2019) Cyber Security Risk Management in the Oil and Gas Industry. International Conference on Digital Economy, 337-358.
Moustafa, M.I. (2015) An Analysis of the Privatization of the Oil and Gas Industry in Egypt: A Focus on Equity and Legal Implications. ProQuest Dissertations Publishing.
Oost, D. and Chew, E. (2007) Investigating the Concept of Information Security Culture. University of Technology Sydney, Sydney.
Leach, J. (2003) Improving User Security Behaviour. Computers & Security, 22, 685-692. https://doi.org/10.1016/S0167-4048(03)00007-5
Ponemon Institute LLC (2018) Cost of Insider Threats: Global. Ponemon Institute, Traverse City. https://www.insiderthreatdefense.us/pdf/Ponemon%20Institute%202018%20Report%20-%20The%20True%20Cost%20Of%20Insider%20Threats%20Revealed.pdf
Munshi, A., Dell, P. and Armstrong, H. (2012) Insider Threat Behavior Factors: A Comparison of Theory with Reported Incidents. Hawaii International Conference on System Sciences, Maui, 4-7 January 2012, 2402-2411. https://doi.org/10.1109/HICSS.2012.326
Back, S. and Guerette, R.T. (2021) Cyber Place Management and Crime Prevention: The Effectiveness of Cybersecurity Awareness Training against Phishing Attacks. Journal of Contemporary Criminal Justice, 37, 427-451. https://doi.org/10.1177/10439862211001628
Hampton, A.J. and DeFalco, J.A. (2022) The Frontlines of Artificial Intelligence Ethics. Routledge, London. https://doi.org/10.4324/9781003030928
Joinson, A.N., Houghton, D.J., Vasalou, A. and Marder, B.L. (2011) Digital Crowding: Privacy, Self-Disclosure, and Technology. Springer, Berlin. https://doi.org/10.1007/978-3-642-21521-6_4
Loveluck, L. (2012) Education in Egypt: Key Challenges. Chatham House, London. https://www.semanticscholar.org/paper/Education-in-Egypt%3A-Key-Challenges-Loveluck/67481746ba3653f62228a230b44fb15512e6db40
Provost, C. (2011) Egypt: Tackling Youth Unemployment. The Guardian. https://www.theguardian.com/global-development/2011/aug/03/egypt-education-skills-gap
Orient Energy Review (2020) Oando Becomes First Oil and Gas Company in Nigeria to Be ISO 27001 Certified. Oandoplc Media Release. https://www.oandoplc.com/oando-becomes-first-african-oil-gas-company-to-be-iso-27001-certified/#:~:text=Blog-,Oando%20Becomes%20First%20Oil%20%26%20Gas%20Company%20in,to%20be%20ISO%2027001%20Certified
Avanceon (2022) TUV Austria’s ISO 27001:2013 Certification. TUV Austria Bureau of Inspection and Certification (Pvt.) Lt. https://www.avanceon.ae/tuv-austria-endorses-avanceons-information-security-management-system-with-iso-27001-certification