Seminar: How cyber incidents can lead to major accidents in the energy sector

Join our complimentary breakfast seminar in Stavanger

Cyber threats to industrial cyber security are becoming more common, complex, and creative. The growing menace of cyber criminals and the increasing interconnectivity of industrial systems, cloud computing, and enterprise IT is making industrial cyber security ever more challenging to manage.

Cyber attacks on industrial infrastructure can have severe physical consequences. For example, an advanced persistent threat (APT) could create a major process accident, such as a gas blow-by, leading to a ruptured pressure vessel and causing a large vapour cloud to form. If that APT has taken complete control of safety instrumented systems, ignition source control will no longer be a reliable barrier function. The vapour cloud would ignite, causing a major explosion that would destroy the installation and could kill nearly everyone on board. Such a scenario is considerably worse than the ransomware cases we read about in the media every day.

In this seminar, we will discuss developments in the industrial cyber threat landscape and cyber-physical scenarios. We will showcase how DNV’s real-world cyber security expertise is helping customers identify their cyber risks, build a powerful force of defence against threats, recover from attacks and win stakeholder trust and support.

This seminar is specifically useful for:
oil and gas operators, suppliers, and engineering companies.

Please register for the complimentary seminar. There is a limited number of seats, so a first-come first-served basis will apply.

Agenda

Breakfast seminar in Stavanger

08:30

Meet & greet including breakfast

09:00

Presentation: How cyber-attacks change safety design criteria

09:30

Presentation: How to cause a major accident using cyber-attacks?

10:00

Coffee and conversation

Boye Tranum

Director cyber security services
Boye Tranum is Director and head of DNV Cyber Security, Norway and Director of DNV Cyber Security Services. In this role, he is responsible for supporting customers to improve their business operations and security, including cyber security. For example, between 2014 and 2021, Boye was engaged as cyber security risk manager for the Martin Linge remote-operated offshore platform program for Total and Equinor. He has also led several independent readiness reviews for oil and gas operators covering operators’ capability and ICT readiness, as well as many cyber security risk assessments. In addition, Boye headed the development of national cyber-related improvements for the Norwegian petroleum sector for the Petroleum Safety Authority.

Boye Tranum
Håkon Olsen

Principal Consultant Cyber Security at DNV
Olsen has more than 10 years of experience in cyber security management and practice with in-depth knowledge of both governance and technical aspects, including software and hardware reliability. Olsen has worked across both industrial (OT) and enterprise (IT) domains, as well as in the cloud and hybrid environments. He has significant experience with threat modelling, risk management, and incident response processes. Olsen also has experience in conducting independent software assessments of safety critical software in railway applications and has worked extensively on secure software development and application security.

Håkon Olsen
Tor Helge Kristiansen

Service Line Manager - Industrial Systems at DNV
Tor Helge Kristiansen is an experienced executive and manager with more than 30 years of experience with information security and cryptography. In his current position as Service Line Manager for Industrial Systems at DNV Cyber Security, Tor Helge specializes in OT cyber security and helps key clients manage cyber security risks in challenging environments. He provides advice related to technology and networks, organization and processes, as well as security awareness of personnel. Assignments range from very specific security assessments to long-term secondment as cyber security coordinator in large organizations. His experience includes security assessments, risk management, gap analysis, security strategies, security policies and procedures, incident response management, network architecture, technical security measures, security training of personnel, as well as project- and personnel management.

Tor Helge Kristiansen