Hydrocarbon Processing - December 2022 - 11

Executive Q&A F. SANJAY
Eaton
Creating trusted environments
ered every day and having strong cybersecurity
protections may not be enough
when attackers shift their attention to
suppliers. The security of a network or a
system is only as strong as its weakest link.
I'd like to underscore two critical lessons
from recent cyberattacks: first, people
are typically the weakest link when it
comes to cybersecurity; and, secondly,
the likelihood of a cyberattack is grossly
underestimated.
The investigative report of a recent
FRANK SANJAY is the Manager of the Product
Cybersecurity Center of Excellence at Eaton,
and a member of the ISA Global Cybersecurity
Alliance. He helps customers by driving Eaton's
" Secure by Design " philosophy in various
intelligent products, providing technical
guidance to global product engineering
teams for implementing cybersecurity. Sanjay
leverages hard-earned practical expertise from
more than 17 yr of hands-on cybersecurity
assessments, technology risk management and
leading highly technical cybersecurity teams.
pipeline breach revealed that attackers
exploited an employee's compromised
credentials. The employee was using the
same credentials for the corporate network
and his personal account. The personal
account was compromised and the
pipeline attackers gained access to that
information and abused it, eventually
halting operations.
The mistaken belief that cybercrimiHydrocarbon
Processing
(HP)
sat
down with Frank Sanjay (FS), Manager
of the Product Cybersecurity Center of
Excellence at Eaton, an intelligent power
management company. In this interview,
Sanjay discussed why addressing cybersecurity
risks is imperative for downstream
refining and petrochemical industries, as
well as how to focus on supply chain cybersecurity,
leveraging emerging cybersecurity
standards to mitigate risk.
HP: What are some of the
key lessons to learn from
recent cyber incidents?
FS: We see malicious cyber activities
increasing. New vulnerabilities are discovnals
need to possess highly sophisticated
skills results in underestimating the likelihood
of a cyberattack. It is often forgotten
that highly sophisticated hackers are
monetizing their skills, offering malware
that can discover vulnerable networks and
selling devices accessible on the internet.
Malicious actors are building tools that
significantly lower the bar for the technical
skills needed to carry out a cyberattack.
A recent advisory by the Cybersecurity
and Infrastructure Security Agency
(CISA) warns about the industrial control
systems attack framework Pipedream,
underscoring the rising cyberthreat to the
energy sector around the world.
HP: What does the hydrocarbon
processing industry (HPI) need
to change in response to recent
cyber incidents?
FS: Executive attention is needed because
cyber risk is not just technology
risk-it is a business risk. Traditionally,
cybersecurity has been treated as a technology
problem, and information technology
(IT) teams often have the responsibility
to mitigate cyber risks. However,
cybersecurity goes far beyond IT.
At Eaton, we believe that cybersecurity
must be viewed from an organizational
perspective, just like quality and safety.
Businesses must engage broader stakeholders,
including operational technology
(OT), supply chain, legal, finance, human
resources and marketing functions.
The implications for cyber breaches are
far-reaching and wide, so it is important to
plug security holes everywhere. IT teams
cannot remediate this problem alone.
In many companies, cybersecurity is
an afterthought. We need to treat cybersecurity
and cyber threats as a risk to be
managed and owned by organizations'
senior leaders and supported by leaders
at every level. Cybersecurity needs to be
part of an overall corporate strategy and
should be embedded deeply into organizational
operations.
At Eaton, we have taken an enterprisewide
approach that promotes the highest
level of defense against emerging cybersecurity
threats. Cybersecurity is part of
our DNA and an integral consideration,
with protocols placed on the people, processes
and technologies within our Secure
Development Lifecycle (SDLC) process.
The process integrates security checkpoints
at various phases of product creation.
Security within SDLC spans from
inception through to deployment and
maintenance, enforcing cybersecurity
best practices via training, threat modeling,
requirements analysis, implementation,
verification and ongoing support.
HP: What are the major
technology cyber risks?
FS: While many OT risks must be addressed,
I believe organizations need to
focus on a few critical areas.
First, ensure all remotely accessible
network connections are managed securely.
This starts with the discovery of all
the remote access points into a company,
the removal of unnecessary connections,
Hydrocarbon Processing | DECEMBER 2022 11

Hydrocarbon Processing - December 2022

Table of Contents for the Digital Edition of Hydrocarbon Processing - December 2022

Hydrocarbon Processing - December 2022 - 1
Hydrocarbon Processing - December 2022 - 2
Hydrocarbon Processing - December 2022 - 3
Hydrocarbon Processing - December 2022 - 4
Hydrocarbon Processing - December 2022 - 5
Hydrocarbon Processing - December 2022 - 6
Hydrocarbon Processing - December 2022 - 7
Hydrocarbon Processing - December 2022 - 8
Hydrocarbon Processing - December 2022 - 9
Hydrocarbon Processing - December 2022 - 10
Hydrocarbon Processing - December 2022 - 10A
Hydrocarbon Processing - December 2022 - 10B
Hydrocarbon Processing - December 2022 - 11
Hydrocarbon Processing - December 2022 - 12
Hydrocarbon Processing - December 2022 - 13
Hydrocarbon Processing - December 2022 - 14
Hydrocarbon Processing - December 2022 - 15
Hydrocarbon Processing - December 2022 - 16
Hydrocarbon Processing - December 2022 - 17
Hydrocarbon Processing - December 2022 - 18
Hydrocarbon Processing - December 2022 - 19
Hydrocarbon Processing - December 2022 - 20
Hydrocarbon Processing - December 2022 - 21
Hydrocarbon Processing - December 2022 - 22
Hydrocarbon Processing - December 2022 - 23
Hydrocarbon Processing - December 2022 - 24
Hydrocarbon Processing - December 2022 - 25
Hydrocarbon Processing - December 2022 - 26
Hydrocarbon Processing - December 2022 - 27
Hydrocarbon Processing - December 2022 - 28
Hydrocarbon Processing - December 2022 - 29
Hydrocarbon Processing - December 2022 - 30
Hydrocarbon Processing - December 2022 - 31
Hydrocarbon Processing - December 2022 - 32
Hydrocarbon Processing - December 2022 - 33
Hydrocarbon Processing - December 2022 - 34
Hydrocarbon Processing - December 2022 - 35
Hydrocarbon Processing - December 2022 - 36
Hydrocarbon Processing - December 2022 - 37
Hydrocarbon Processing - December 2022 - 38
Hydrocarbon Processing - December 2022 - 39
Hydrocarbon Processing - December 2022 - 40
Hydrocarbon Processing - December 2022 - 41
Hydrocarbon Processing - December 2022 - 42
Hydrocarbon Processing - December 2022 - 43
Hydrocarbon Processing - December 2022 - 44
Hydrocarbon Processing - December 2022 - 45
Hydrocarbon Processing - December 2022 - 46
Hydrocarbon Processing - December 2022 - 47
Hydrocarbon Processing - December 2022 - 48
Hydrocarbon Processing - December 2022 - 49
Hydrocarbon Processing - December 2022 - 50
Hydrocarbon Processing - December 2022 - 51
Hydrocarbon Processing - December 2022 - 52
Hydrocarbon Processing - December 2022 - 53
Hydrocarbon Processing - December 2022 - 54
Hydrocarbon Processing - December 2022 - 55
Hydrocarbon Processing - December 2022 - 56
Hydrocarbon Processing - December 2022 - 57
Hydrocarbon Processing - December 2022 - 58
Hydrocarbon Processing - December 2022 - 59
Hydrocarbon Processing - December 2022 - 60
Hydrocarbon Processing - December 2022 - 61
Hydrocarbon Processing - December 2022 - 62
Hydrocarbon Processing - December 2022 - 63
Hydrocarbon Processing - December 2022 - 64
Hydrocarbon Processing - December 2022 - 65
Hydrocarbon Processing - December 2022 - 66
Hydrocarbon Processing - December 2022 - 67
Hydrocarbon Processing - December 2022 - 68
https://www.nxtbook.com/gulfenergyinfo/gulfpub/HPI-Market-Data-2023-v3
https://www.nxtbook.com/gulfenergyinfo/gulfpub/hpi-market-data-2024-v2
https://www.nxtbook.com/gulfenergyinfo/gulfpub/hpi-market-data-2024
https://www.nxtbook.com/gulfenergyinfo/gulfpub/gas-processes-handbook-2022_v2
https://www.nxtbook.com/gulfenergyinfo/gulfpub/gas-processes-handbook-2022
https://www.nxtbook.com/gulfenergyinfo/gulfpub/hp_202212
https://www.nxtbook.com/gulfenergyinfo/gulfpub/hpi-market-data-2023-v2
https://www.nxtbook.com/gulfenergyinfo/gulfpub/hpi-market-data-2023
https://www.nxtbook.com/gulfenergyinfo/gulfpub/hp_202211
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202210
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202209
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202208
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202207_v2
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202207
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202206_v2
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202206
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202205_v2
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202205
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202204_v2
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202204
https://www.nxtbook.com/nxtbooks/gulfpub/hp_032022
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202203
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202202
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202201
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202112
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202111
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202110
https://www.nxtbook.com/nxtbooks/gulfpub/hpimarket_2022_v2
https://www.nxtbook.com/nxtbooks/gulfpub/hpimarket_2022
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202109
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202108
https://www.nxtbook.com/nxtbooks/gulfpub/petrochemical_processes_handbook_2021_v2
https://www.nxtbook.com/nxtbooks/gulfpub/petrochemical_processes_handbook_2021
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202107
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202106
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202105
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202104
https://www.nxtbook.com/nxtbooks/gulfpub/hp_ebooks
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202103
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202102
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202101
https://www.nxtbook.com/nxtbooks/gulfpub/catalyst_handbook_2020_v2
https://www.nxtbook.com/nxtbooks/gulfpub/catalyst_handbook_2020
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202012
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202011
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202010
https://www.nxtbook.com/nxtbooks/gulfpub/hpimarket_2021
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202009
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202008
https://www.nxtbook.com/nxtbooks/gulfpub/refining_processes_handbook_2020
https://www.nxtbook.com/nxtbooks/gulfpub/refining_processes_handbook_2020_v2
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202007
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202006
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202005
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202004
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202003
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202002
https://www.nxtbook.com/nxtbooks/gulfpub/hp_202001
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201912
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201911
https://www.nxtbook.com/nxtbooks/gulfpub/hpimarket_2020_v2
https://www.nxtbook.com/nxtbooks/gulfpub/hpimarket_2020
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201910
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201909
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201908
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201907
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201906
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201905
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201904
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201903
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201902
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201901
https://www.nxtbook.com/nxtbooks/gulfpub/petrochemical_2018_v2
https://www.nxtbook.com/nxtbooks/gulfpub/petrochemical_2018
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201812
https://www.nxtbook.com/nxtbooks/gulfpub/hpimarket_2019_v2
https://www.nxtbook.com/nxtbooks/gulfpub/hpimarket_2019
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201811
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201810
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201809
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201808
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201807
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201806
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201805
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201804
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201803
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201802
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201801
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201712
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201711
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201710
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201709
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201708
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201707
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201706
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201705
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201704
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201703
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201702
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201701
https://www.nxtbook.com/nxtbooks/gulfpub/hp_2017mediaplanner
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201612
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201611
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201610
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201609
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201608
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201607
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201606
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201605
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201604
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201603
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201602
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201601
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201512
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201511
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201510
https://www.nxtbook.com/nxtbooks/gulfpub/hp_2016mediaplanner
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201509
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201508
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201507
https://www.nxtbook.com/nxtbooks/gulfpub/hp_2015tmsd
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201506
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201505
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201504
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201503
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201502
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201501
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201412
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201411
https://www.nxtbook.com/nxtbooks/gulfpub/hp_2015mediaplanner
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201410
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201409
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201408
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201407
https://www.nxtbook.com/nxtbooks/gulfpub/hp_2014petrochemicalprocesses_v2
https://www.nxtbook.com/nxtbooks/gulfpub/hp_2014petrochemicalprocesses
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201406
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201405
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201404
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201403
https://www.nxtbook.com/nxtbooks/gulfpub/hp_2014calendar
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201402
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201401
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201312
https://www.nxtbook.com/nxtbooks/gulfpub/hp_2014mediaplanner
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201311
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201310
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201309
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201308
https://www.nxtbook.com/nxtbooks/gulfpub/hp_srsguide2013
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201307
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201306
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201305
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201304
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201303
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201302
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201301
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201212
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201211
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201210
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201209
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201208
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201207
https://www.nxtbook.com/nxtbooks/gulfpub/hp_srsguide2012
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201206
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201205
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201204
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201203
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201202
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201201
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201112
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201111
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201110
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201109
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201108
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201107_srsguide
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201107
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201106
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201105
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201104
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201103
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201102
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201101
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201012
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201011
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201010
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201009
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201008
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201007
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201006
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201005
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201004
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201003
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201002
https://www.nxtbook.com/nxtbooks/gulfpub/hp_201001
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200912
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200911
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200910
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200909
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200908
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200907
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200906
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200905
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200904
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200903
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200902
https://www.nxtbook.com/nxtbooks/gulfpub/hp_200901
https://www.nxtbookmedia.com