CYBERSECURITY RISK ASSESSMENT AND THREAT MODELING FOR TANKER BERTHING SYSTEM IN OFFSHORE OIL AND GAS FPSO PLATFORM

Abstract

Digitizing FPSO systems improves operations, it also exposes them to cyberattacks that can cause financial, operational, safety, and environmental harm. Thus, ensuring continuous operation during a security incident is as vital as preventing the attack itself. The thesis emphasizes the critical importance of securing FPSO Tanker Berthing Systems (TBS). It highlights a study's recommendation for a new, more effective cybersecurity framework for TBS. This framework integrates the NIST Cybersecurity Framework's Identify and Protect functions, STRIDE threat modeling, and a Risk Matrix. This approach is lauded for its effectiveness in identifying threats (specifically the "Tanker Berthing System Application Base Station" as a key weak point) and providing a comprehensive threat modeling methodology that spans from high-level governance to detailed technical attacks. In conclusion, the research finds that this framework improves the accuracy of identifying OT (Operational Technology) cybersecurity risks and boosts predictive cybersecurity strategies. The thesis stresses that proactive risk identification and effective threat modeling are crucial for preventing cyber incidents, cutting operational costs, and maintaining continuous, efficient, and secure offshore oil and gas operations. The core message is that securing FPSO tanker berthing systems necessitates an integrated, evolving security program, a deep grasp of cyber-physical risks, structured methodologies, constant vigilance, and robust cross-functional communication within the organization.