Building an Operating Technology (OT) Cybersecurity Organization: The Lyondell/Basell Journey toward a More Secure Manufacturing Network

Business executives, regulators, customers and the general public now understand companies with industrial facilities face significant cyber risk.In response, executives and boards are requiring improved Operating Technology (OT) cyber risk visibility to avoid safety and financial impacts.They also want data that proves how an OT security program investments have reduced risk.Several years ago, the LyondellBasell IT and OT security teams began shifting their approach from security management to risk management.The shift occurred to eliminate vulnerabilities on our networks.Over 10 years, the company has maintained focus and has continued driving toward improved security on all systems within the LyondellBasell domain.Most recently, the company has placed an increased focus on the OT systems security.The focus of this paper will be to better understand how the shift from security management to risk management occurred at LyondellBasell.You will also hear how the OT security team adapted to meet new risk management-focused governance models, security standards and integration requirements.Some of the measurements for success will be shared and how those metrics provide enhanced visibility into process control network security.Lastly, the skillsets required to meet the needs of industrial OT security support will be addressed.been developed, allowing for the organizational movement into other roles within cybersecurity, IT, or manufacturing.This training is an investment into careers with the intent to build committed, knowledgeable employees. ClosingBuilding a robust digital security program takes time and focus.The focus includes a risk management process, including OT, and developing a talented resource pool for addressing the continuing challenges.The changing threat landscape requires a constantly evolving program to stay ahead.LyondellBasell, like you, is on this never-ending journey.