The role of the supply chain in cybersecurity incident handling for drilling rigs

Abstract

This paper presents a characterisation of the oil and gas drilling supply chain in the context of cybersecurity incident handling. Coordination and collaboration between stakeholders are critical factors in incident handling. However, the number of organisations and stakeholders involved in drilling is high and, thus, it is relevant to understand better their interactions during incident handling. This paper provides a high-level overview of these stakeholders interactions during cybersecurity incident handling, as a basis for future research. This characterisation shows the suitability of modelling the supply chain from the incident perspective to understand, more clearly, the ramifications of incidents and the coordination needs.