Drop more SBOMs: how the energy industry can tighten up cybersecurity

The energy sector has found itself in the crosshairs of what's been called a rare and dangerous state-sponsored malware threat capable of disruption, sabotage, and potentially physical destruction of energy assets, with LNG and electric facilities believed to be the initial target. Meanwhile, a collaboration between oil and gas companies and the R&D arm of the Department of Homeland Security, called The Linking the Oil and Gas Industry to Improve Cybersecurity program, is working to bolster the level of cybersecurity in critical systems of interest to the oil and natural gas sector. The program is behind a recent study that takes a look at how a software bill of materials, or SBOM, can be used to manage cybersecurity risks to industrial control systems software from third-party components introduced as part of vendor solutions. Schneider Electric Vice President and Deputy Product Security Officer Cassie Crossley joined the podcast to discuss the risks vendors introduce to oil and gas operators, the cyber defenses available to the sector and how SBOM development and use could aid the oil and gas industry. Senior editor Jasmin Melvin also asked her about the new malware threat to the energy sector and Schneider Electric's efforts to thwart it. Stick around after the interview for Starr Spencer with the Market Minute, a look at near-term oil market drivers. This podcast was produced by Jasmin Melvin in Washington and Jennifer Pedrick in Houston.