Managing Security Risks in the Oil and Gas Industry

Introduction

Oil and Gas Risk and Security is all about people, plant, equipment, and procedures. Even with the best intentions, these can and will often have gaps and weaknesses that may not always be seen from within the organization. Oil & Gas control systems used to control the transport and storage of petroleum products deserve the highest level of protection from SCADA security and control system security threats. Occupational safety, environmental safety, and public safety priorities demand reliable and trustworthy industrial control systems to facilitate human oversight of complex physical processes. Security threats from the most commonplace malware to today’s pervasive targeted attacks of all persuasions must all be addressed and mitigated.

This Managing Security Risks in the Oil and Gas Industry training course will identify that threats are not always from the traditional ‘front gate’ approach, a joined-up Security Policy should therefore also cover Corporate, Criminal, Civil Unrest, Cyber as well as Terrorism from Internal and/or external threats. The biggest threat could be the one you were not expecting!

This training will highlight:

• How the Security professional can achieve a consistent level of best practice across a wide range of risks?
• How to improve the professionalism of the pro-active security team?
• Security risk assessment, quantification, and mitigation
• Key- asset identification and vulnerability assessment
• How to gain executive support to implement multi-disciplined security projects?

Objectives

This Managing Security Risks in the Oil and Gas Industry training course is structured to equip delegates with the specialist security knowledge to perform their management and supervisory duties to international standards in both security planning and asset protection. At the end of the training, delegates will be able to:

• Understand Security Management practice and how to apply these principles
• Learn how to plan and effectively implement security projects
• Analyze a suitable cyber protection program to protect Oil & Gas intellectual property
• How to improve the professionalism and reputation of the Security team?
• Understand how to mitigate the full range of risks facing the Oil & Gas industry

Training Methodology

This is an interactive course. There will be open question and answer sessions, regular group exercises and activities, videos, case studies, and presentations on best practice. Participants will have the opportunity to share with the facilitator and other participants on what works well and not so well for them, as well as work on issues from their own organizations. The online course is conducted online using MS-Teams/ClickMeeting.

Who Should Attend?

This Managing Security Risks in the Oil and Gas Industry training course is structured to equip attending delegates with the specialist security knowledge to perform their management and supervisory duties to international standards in Oil & Gas Security Management, Planning, and Asset protection.  All those who have responsibility for the security or are included in security response plans should therefore attend.

• Security Supervisors / Managers
• Facility Supervisors / Managers
• HSSE Personnel
• Fire Department Personnel
• HR and Administrative supervisors responsible for the security

Course Outline

Day 1: Understanding the Professional Issues of Security Management

• Introduction to Security Risks in the Oil & Gas Industry
• Consider the Full Range of Risks - Local, National, International
• The Management of those Risks
• Management Policies and Regulations
• International Professional Standards

Day 2: The Importance of Security Planning

• Understanding Loss
• Legal Obligations - Local, National, International
• Loss of Reputation
• Crime Management and Prevention
• Principles of Emergency Response and Recovery
  • Incident Response
  • Who does what? – Who goes where? – Who calls who?
  • On-Scene Management
• Case Studies

Day 3: Threats to Assets – Security Audits

• Key Asset / Point Identification
• Screening
  • Personnel
  • Clearances – Forms
  • International Visits
  • Contractors and Sub-Contractors
• Classification of Documents - Policy
• Information, Cyber & Computer Security
• Clear Desk Policy
• Workstation / Laptop Security
• Data Retention
• Identity Theft
• Fire Fighting
• Evacuation Planning
• Security Survey – 

Day 4: Principles of Asset Protection

• Physical Security
  • Perimeter Security - Zones
  • Access Control
  • Searches
  • Cordons
  • Surveillance Patrols
• Investigations / Interviewing
• Special Risks
• Terrorism
• Kidnap
• Crowd Control
• Bomb Warnings
• Search Techniques
• Explosive’s Recognition
• Anti and Counter Surveillance
• Firearms and Weapons

Day 5: Implementing Programmes – What should be in Place?

• Crisis Management Procedures
• Business Continuity Procedures
• Mutual Aid
• Communication Strategies
• Emergency Communication / Control Centres
• Communication Skills - Verbal, Phone and Radio
• Social Media and Public Relations