Wednesday, October 27, 2021
HomeAlternative EnergiesNatural GasNatural Gas Pipelines ‘Not at the Forefront’ of Cybersecurity, Experts Warn

Natural Gas Pipelines ‘Not at the Forefront’ of Cybersecurity, Experts Warn

Natural gas pipeline operators must enhance their cybersecurity protocols to avoid breaches like the one that shut down the Colonial Pipeline refined products conduit in May, a panel of experts agreed Wednesday. 

Electronic bulletin boards (EBB) are especially vulnerable to hacks, said the panelists participating virtually in the LDC Gas Forums Midcontinent conference in Chicago.

The energy industry “is probably not at the forefront in terms of adopting the latest technology,” said CEO Jay Bhatty. 

He explained that “today when you hit click, and you submit your gas nomination, it leaves your home or your office. It’s traveling over the public internet and it’s traveling unencrypted…most companies are likely not using encryption software to encrypt their nominations.” 

[Tune In: Join NGI Price & Markets Editor Leticia Gonzales as she sits down with EIA Energy Economist Stephen York to discuss the recent ramp up in natural gas prices, the fundamentals driving it and where the price might be headed for the upcoming winter. Listen now.]

This puts data at risk of being intercepted by hackers, said Bhatty. He urged companies to “check the entry/exit point of your data when it leaves your employee laptops and computers, how is it getting to its destination, and how is the data getting from the destination back to you.”

Fellow panelist Marcin Toczydlowski, director of Process IQ Co., stressed the importance of two-factor authentication for EBBs.

“Password-only authentication is bad and will get you hacked, full stop,” he said. Toczydlowski said single factor authentication is the “biggest problem in the energy industry” from a cybersecurity perspective.

Another common mistake is to email unprotected Microsoft Excel spreadsheets containing sensitive information. Bhatty said users should use password protection to encrypt their spreadsheets.

Panelist Danial McGrath, advanced system director for energy at FIS, agreed, stressing the importance of “password hygiene” to prevent attacks.

“Excel, while it’s very easy and flexible to use, is also becoming an offline tool,” Bhatty said. “A lot of companies are realizing that Excel is not centralized. It resides on individual computers, employee laptops, and so their data can’t be centralized.”

As a result, companies in sectors such as banking increasingly are phasing out or limiting the use of Excel, or requiring employees to obtain Information Technology, aka IT, department approval before using it.

One easy step for pipeline companies to protect their data is to hire a cybersecurity firm to conduct a penetration test, aka a pen test, to find the weak areas of a network.

Bhatty also noted that FERC has “gently been nudging the industry towards more automations and cybersecurity, reducing the cyber threat.”

All three panelists stressed the importance of robust cybersecurity regulations. However, they said industry must take the lead in fortifying its networks against attack.

Regulatory initiatives in the cyber arena “have a tendency to create a lot of complexities,” Toczydlowski said.

Bhatty agreed, saying that “sometimes a regulator will tend to use a hammer instead of a chisel” in crafting rules or guidelines. He cited the North American Energy Standards Board, aka NAESB, as an industry group that has helped the Federal Energy Regulatory Commission craft effective regulations.

The American Petroleum Institute (API) in August also published the third edition of its Standard 1164, Pipeline Control Systems Cybersecurity.

Toczydlowski praised the API standards, as well as guidelines published by the Cybersecurity & Infrastructure Security Agency.

“The challenge,” he said, “is implementing them and making sure that you follow their instructions.”

The Transportation Security Administration also has handed down new cybersecurity directives for pipelines in the wake of the Colonial attack.Leaders from the energy, technology, and financial sectors, meanwhile, vowed to help harden the country’s vital infrastructure against cyber attacks following a summit last month with President Biden.

Source link



  1. Wow, amazing weblog structure! How long have you ever been blogging for? you make blogging glance easy. The overall glance of your web site is great, let alone the content!!

  2. Wow, superb blog layout! How long have you been running a blog for? you make blogging glance easy. The full look of your website is great, as neatly as the content material!!

  3. Hello! This is kind of off topic but I need some help from an established blog. Is it very hard to set up your own blog? I’m not very techincal but I can figure things out pretty fast. I’m thinking about setting up my own but I’m not sure where to start. Do you have any ideas or suggestions? Thanks

  4. My developer is trying to convince me to move to .net from PHP. I have always disliked the idea because of the costs. But he’s tryiong none the less. I’ve been using WordPress on various websites for about a year and am concerned about switching to another platform. I have heard good things about Is there a way I can import all my wordpress posts into it? Any help would be greatly appreciated!

  5. Hello! This post couldn’t be written any better! Reading through this post reminds me of my good old room mate! He always kept chatting about this. I will forward this page to him. Fairly certain he will have a good read. Many thanks for sharing!

  6. I appreciate, cause I found exactly what I was looking for. You’ve ended my 4 day long hunt! God Bless you man. Have a great day. Bye

  7. Write more, thats all I have to say. Literally, it seems as though you relied on the video to make your point. You clearly know what youre talking about, why waste your intelligence on just posting videos to your weblog when you could be giving us something informative to read?

  8. Please let me know if you’re looking for a article writer for your weblog. You have some really great posts and I feel I would be a good asset. If you ever want to take some of the load off, I’d really like to write some material for your blog in exchange for a link back to mine. Please send me an e-mail if interested. Kudos!


Please enter your comment!
Please enter your name here

- Advertisment -

Most Popular

Recent Comments