FORESCOUT CUSTOMER CASE STUDY

Oil & Gas Company Implements OT
Network Monitoring to Reduce Cyber andOperational Risk
To help identify risk and mitigate to an acceptable level, the company deployedeyeInspect to understand what was on the OT network and to be able to quickly identify
threats and vulnerabilities.

CUSTOMER PROFILE
Oil & Gas
This oil & gas company is an industry leader inthe offshore drilling industry. It operates one of
the largest, high quality rig fleets in the world andis among the most technologically advanced in
the industry. They are committed to safety andoperational excellence, with a focus on technology
and innovation.

THE CHALLENGE
With quantifying and mitigating cyber and operational risk now becoming a top priority, oil & gas asset owners mustcraft long term risk reduction strategies. The team quickly recognized that the first step towards reducing risk was toidentify and review potential vulnerabilities on critical systems offshore. In order to mitigate operational and safety
risk, it was critical to fully understand the type of threats and their origin.
The first initiative centered around finding and training qualified people to map the network and establish a strategy
to protect it. This operational technology (OT) cybersecurity team was tasked with identifying all the existing assets
in the network and assessing what the risk levels were. However, this manual process was an enormous task, and theteam needed an alternative approach. This original initiative risked taking a considerable amount of time, and threats
could go unnoticed in such a vast operation connecting multiple oil rigs and offices around the world during thattime.

THE PROJECT
To help automate and accelerate the process of mapping the network, the team decided that implementing an OT
network monitoring tool was the alternative approach they needed. Although deploying this type of technology is
widely used in the utility industry, it’s still relatively uncommon in drilling, but the company was determined to makeit happen. Centralized oversight was required for such an expansive and complicated network. The right solution
would be able to keep track of all the devices connected to the network, identify any deviations in the normal baselineof network traffic, and archive the data for future reference.

FORESCOUT CUSTOMER CASE STUDY

THE SOLUTION

123

When eyeInspect was deployedduring the proof of concept(PoC), the results provided
an initial understanding of
how deploying an OT network
monitoring tool could help
them reach the goal of deeper
visibility to reduce cyber andoperational risk. The PoC also
exposed the challenges ofdeploying newer technology on
legacy systems, which proved
vital in providing an accuratebudget for the project.

During this project, the company
was not just architecting for
one control system, multiplecontrol systems throughout theglobal fleet required monitoring.
Everything from the blow out
preventer (BOP) to the dynamic
propulsion systems (DPS) had
to be monitored. Since it was
not practical to have a sensor on
every system, the hardware wasstrategically placed on chokepoints in the vessel’s network.

The company ultimately chose
Forescout eyeInspect overothers because its provenand turnkey solution moreaccurately identified assets on
the network, was the easiest
to use, and didn’t require new
infrastructure to get it up andrunning. Forescout’s approachalso felt like more of a business
partnership, rather than a
traditional vendor relationship.

THE RESULTS
Visibility into process data and identification of previously unknown assets, which laid the foundation for
implementing an in-depth gap assessment
Quick identification of cyber risks like the presence of vulnerabilities on a specific device and operational risks likeout of range process values
Automated data gathering, including detailed reports on network traffic anomalies, for real-time analysis by thecybersecurity team

Additional Links:•••

Web Page: Cybersecurity for the Oil & Gas Industry
Solution Brief: Securing Vulnerable ICS and OT Networks
eBook: How to Effectively Implement ISA 99/IEC 62443

Forescout Technologies, Inc.
Toll-Free (US) 1-866-377-8771
Tel (Intl) +1-408-213-3191
Support +1-708-237-6591
Learn more at Forescout.com©2024 Forescout Technologies, Inc. All rights reserved. Forescout Technologies, Inc. is a
Delaware corporation. A list of our trademarks and patents can be found at https://www.
forescout.com/company/legal/intellectual-property-patents-trademarks. Other brands,
products, or service names may be trademarks or service marks of their respectiveowners.