State of Operational Technology
Cybersecurity in the Oil and Natural
Gas Industry

Operational Technologies (OT) comprise hardware and software assets, tools, and procedures used to monitor and
control physical processes. OT cybersecurity includes controls to protect and secure these assets as well as
methodologies, methods, devices, and tools used to ensure the stability, resilience, and ease of recovery of these
assets during and after a cyber event. This document is a detailed discussion of the current state of OT cybersecurity
in the Oil and Natural Gas (ONG) industry. The result of cumulative research and analysis conducted within the
industry, this report examines data, metrics, and trends to reach overarching ONG-specific conclusions about the
state of security of OT assets and processes.