PDO DACA Cyber Security Upgrades

Follow PDO specific DCADA System Hardening measures for all Control Systems Servers, Operator and Engineering Workstations at site. This included recording all systems and software attributes including licences and installed software and conducting intrusion impact awareness training with all users in the PDO assets.

Project Details

  • Contract No. C162
  • Primary Service Construction & Commissioning, Consultancy, Detailed Design & Engineering
  • Industry Oil & Gas
  • Secondary Service As Built Documentation, Cyber Security, Site Construction, Technical Document Authoring
  • Client Petroleum Development Oman
  • Start Date Jun 2013
  • Consultant or EPC Honeywell Oman
  • Contract Value ($) 96200
  • Project Location Al Fahal Street, Muscat 100, Oman
  • Person Hours 1240
  • Execution Office Birmingham, United Kingdom
  • Status Completed

Scope of work

    Conduct site surveys and implement System Hardening for all Control Systems Servers, Operator and Engineering Workstations at site and awareness conduct training.

Activities

  • Audit and record Hardware attributes
  • Audit and record all install software applications versions
  • Audit and record all installed software licences
  • Upgrade Operating System Versions
  • Harden the systems
  • Conduct Training

Deliverables

  • Site Survey
  • Audit Report
  • System Hardening
  • Training

Technical specifications

  • PDO DEP 32.01.20.10 - Data Acquisition & Control Architecture (DACA)
  • PDO DEP 32.01.21.10 - Data Acquisition & Control Architecture (DACA) - Roles and responsibilities
  • PDO DEP 32.01.22.10 - Data Acquisition & Control Architecture (DACA) - procedural controls - Configuration management
  • PDO DEP 32.01.22.11 - Data Acquisition & Control Architecture (DACA) - procedural controls - Backup and restore
  • PDO DEP 32.01.22.12 - Data Acquisition & Control Architecture (DACA) - procedural controls - Incident management
  • PDO DEP 32.01.22.13 - Data Acquisition & Control Architecture (DACA) - procedural controls - Disconnection procedure
  • PDO DEP 32.01.23.11 - Data Acquisition & Control Architecture (DACA) - Technical controls - Infrastructure architecture
  • PDO DEP 32.01.23.12 - Data Acquisition & Control Architecture (DACA) - Technical controls - Remote user access
  • PDO DEP 32.01.23.13 - Data Acquisition & Control Architecture (DACA) - Technical controls - Wireless security
  • PDO DEP 32.01.23.14 - Data Acquisition & Control Architecture (DACA) - Technical controls - Minimal access
  • PDO DEP 32.01.23.15 - Data Acquisition & Control Architecture (DACA) - Technical controls - Authentication and authorisation
  • PDO DEP 32.01.23.18 - Data Acquisition & Control Architecture (DACA) - Technical controls - PCD network drawings
  • PDO DEP 32.01.23.19 - Data Acquisition & Control Architecture (DACA) - Technical controls - Architectural requirements for applications utilising production data
  • PDO DEP 32.01.25.10 - Data Acquisition & Control Architecture (DACA) - System security - Virus management
  • PDO DEP 32.01.25.11 - Data Acquisition & Control Architecture (DACA) - System security - Patch management
  • PDO DEP 32.01.26.11 - Data Acquisition & Control Architecture (DACA) - Assurance - Risk assessment