# Oil & Gas Cybersecurity Assessment

> From $52K · Specialized & Industry · https://cisomarketplace.services/services/oil-gas-cybersecurity-assessment

Specialized security assessment for oil and gas operations, addressing the unique challenges of securing upstream, midstream, and downstream operations. Our comprehensive evaluation examines operational technology, SCADA systems, field devices, and IT/OT convergence points while ensuring compliance with industry regulations and standards.

## In scope

- OT/ICS security assessment
- SCADA system security evaluation
- Field device security review
- Pipeline monitoring system security
- Refinery control system assessment
- IT/OT convergence security
- Physical security integration
- Regulatory compliance verification
- Third-party risk assessment
- Incident response capability

## Deliverables

- Oil & gas security assessment report
- OT/ICS security recommendations
- SCADA protection strategy
- Field device security framework
- IT/OT segmentation architecture
- Regulatory compliance roadmap
- Physical-cyber security integration plan
- Critical infrastructure protection strategy
- Implementation prioritization

## Tiers

### Essential Oil & Gas Security Assessment: $52K

Assessment of 1 operating site in one segment: OT/ICS and SCADA security evaluation, field device review on a sample of up to 25 devices, IT/OT boundary review, incident response capability check, and review against 1 regulatory standard.

Limits: locations 1, devices 25, frameworks 1

Includes:
- OT/ICS and SCADA security evaluation at 1 site
- Field device security review, sample of up to 25 devices
- IT/OT convergence point review
- Incident response capability check
- Regulatory review against 1 standard
- Report with implementation prioritization

Excludes:
- Pipeline monitoring and refinery control system deep-dives
- IT/OT segmentation architecture design
- Physical security integration
- Third-party risk assessment

### Comprehensive Oil & Gas Security Program: $95K

Assessment of up to 3 sites across up to 2 segments, up to 75 field devices sampled. Adds pipeline monitoring and refinery control system assessment, IT/OT segmentation architecture, SCADA protection strategy, physical security integration, third-party risk, and a compliance roadmap.

Limits: locations 3, devices 75, frameworks 2, vendors 10

Includes:
- Everything in the Essential tier, for up to 3 sites
- Pipeline monitoring and refinery control system assessment
- IT/OT segmentation architecture
- SCADA protection strategy
- Physical-cyber security integration plan
- Third-party risk assessment of up to 10 vendors

Excludes:
- Implementation support
- Security governance model
- More than 3 sites

### Enterprise Energy Security Transformation: $150K

Full-spectrum security program for large energy operations with custom architecture, implementation support, and governance

Limits: locations 5, devices 200, frameworks 3, vendors 25

Excludes:
- Remediation hardware and licences
- Operations above 5 sites (scoped separately)

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=oil-gas-cybersecurity-assessment