Canada’s oil and gas sector, a vital part of its economy, contributes approximately $120 billion, or about 5% of the country’s Gross Domestic Product (GDP). This industry not only drives economic growth but also supports essential services such as heating, transportation, and electricity generation, playing a crucial role in national security. However, the increasing digital transformation of Operational Technology (OT) within this sector has made it more vulnerable to cyber threats, according to a report by the Canadian Centre for Cyber Security.

A survey conducted by Statistics Canada revealed that around 25% of all Canadian oil and gas organizations reported experiencing a cyber incident in 2019. This is the highest rate of reported incidents among all critical infrastructure sectors, highlighting the urgent need for improved cybersecurity measures in Canada. While the digital transformation of OT systems enhances management and productivity, it also expands the attack surface for cyber actors, exposing these systems to various cyber threats.

The Canadian Centre for Cyber Security's report indicates that medium- to high-sophistication cyber threat actors are increasingly targeting organizations indirectly through their supply chains. This tactic enables attackers to gain valuable intellectual property and information about the target organization’s networks and OT systems. The reliance of large industrial asset operators on a diverse supply chain—including laboratories, manufacturers, vendors, and service providers—creates critical vulnerabilities that cyber actors can exploit to access otherwise protected IT and OT systems.

The report emphasizes that cybercriminals driven by financial gain pose the most significant threat to the oil and gas sector. Business Email Compromise (BEC) schemes and ransomware attacks are particularly prevalent. Although BEC is more common and costly, ransomware remains a primary concern due to its potential to disrupt the supply of oil and gas to customers.

The evolving cybercriminal ecosystem, including ransomware-as-a-service (RaaS) models, allows even less skilled attackers to launch sophisticated attacks, resulting in an increase in successful incidents targeting the sector. The report cites the Colonial Pipeline ransomware attack in May 2021 as a stark example of the potential consequences of such cyber incidents. This attack forced the shutdown of a major fuel pipeline in the U.S., leading to significant disruptions, panic buying, and price spikes. Similar incidents could occur in Canada, jeopardizing the supply of essential products and services.

The report also highlights the financial implications of cyber threats. The cost of a data breach can vary significantly, with estimates suggesting it can reach millions of dollars depending on the organization's size and nature. The potential for disruption or sabotage of OT systems poses a costly threat to owner-operators of large OT assets, impacting national security, public safety, and the economy.

The Canadian Centre for Cyber Security notes that the oil and gas sector attracts considerable attention from financially motivated cyber threat actors due to the high value of its assets. Cybercriminals target not only operational systems but also valuable intellectual property, business plans, and client information. Protecting these assets is crucial, as the disruption of operations could have far-reaching consequences.

In light of these threats, the report urges organizations within the oil and gas sector to prioritize cybersecurity investments and adopt a proactive approach to risk management. Continuous training and awareness programs for employees are essential to mitigate risks associated with human error, a significant factor in successful cyber attacks.

The Canadian Centre for Cyber Security stresses the need for collaboration between public and private sectors to combat cyber threats effectively. By sharing information and best practices, organizations can better prepare for and respond to cyber incidents.

Overall, the findings from the Canadian Centre for Cyber Security highlight the pressing need for enhanced cybersecurity measures within Canada’s oil and gas sector. With cyber threats on the rise, it is imperative for organizations to take proactive steps to safeguard their operations and ensure the resilience of this critical infrastructure. The time to act is now, as the stakes have never been higher in the fight against cybercrime