Building an Operating Technology (OT) Cybersecurity Organization: The Lyondell/Basell Journey toward a More Secure Manufacturing Network
Year: 2024
Type: conference-paper
Abstract: Business executives, regulators, customers and the general public now understand companies with industrial facilities face significant cyber risk.In response, executives and boards are requiring improved Operating Technology (OT) cyber risk visibility to avoid safety and financial impacts.They also want data that proves how an OT security program investments have reduced risk.Several years ago, the LyondellBasell IT and OT security teams began shifting their approach from security management to risk management.The shift occurred to eliminate vulnerabilities on our networks.Over 10 years, the company has maintained focus and has continued driving toward improved security on all systems within the LyondellBasell domain.Most recently, the company has placed an increased focus on the OT systems security.The focus of this paper will be to better understand how the shift from security management to risk management occurred at LyondellBasell.You will also hear how the OT security team adapted to meet new risk management-focused governance models, security standards and integration requirements.Some of the measurements for success will be shared and how those metrics provide enhanced visibility into process control network security.Lastly, the skillsets required to meet the needs of industrial OT security support will be addressed.
Author: Michael Norris
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
OpenAlex ID: W4402365305