Cybersecurity in Oil & Gas 4.0: A Systematic Literature Review of Challenges, Threats, and Mitigating Measures

Abstract Oil & Gas 4.0 refers to the journey of the oil and gas industry toward digital transformation as part of the Fourth Industrial Revolution. Enterprises around the globe are adopting technologies such as Artificial Intelligence (AI), Machine Learning (ML), Cloud Computing, Virtual and Augmented reality to boost overall business productivity. The oil and gas industry is an essential part of the energy sector that plays a vital role in the global economy. Like most international enterprises, this sector is susceptible to cyber-attacks due to its reliance on technology and digital systems. Cyberattacks on oil and gas facilities can cause significant damage to critical infrastructure such as pipelines, refineries, and drilling rigs. These attacks can disrupt the supply of energy resources and lead to environmental disasters. The oil and gas industry deals with sensitive data including information about reserves, production volumes, planned expansions, financial information, and intellectual property related to innovation and research. Cyberattacks can compromise this data leading to financial losses and reputational damage. For all oil and gas companies that are committed to the Oil & Gas 4.0 journey, cybersecurity presents complex challenges and major threats to the business. This systematic literature review aims to identify and analyze the cybersecurity challenges, threats, and mitigations in the oil and gas industry. This review includes comprehensive research of relevant literature published between 2014 and 2023. The findings reveal that the oil and gas industry is facing various cybersecurity challenges, including a significant increase of cyberattacks, a lack of awareness among employees, and inadequate cybersecurity measures. The review also highlights the different types of cyber threats faced by the industry, such as malware attacks, phishing scams, and ransomware attacks. These cyber threats present substantial challenges to the progress of oil and gas companies in implementing digital transformation strategies. This paper provides valuable insights into the current state of cybersecurity in the oil and gas industry and offers recommendations for improving cybersecurity practices to ensure a smooth digital transformation.