In 2015, we performed an audit to evaluate if the government should assess the risks to Alberta from unsecured industrial control systems used in provincially regulated oil and gas infrastructure. We made one recommendation to the Alberta Energy Regulator and the Department of Energy to work together to determine whether a further assessment of threats, risks and impacts to ICS used in provincially regulated oil and gas infrastructure would benefit Alberta.
We conducted a follow-up audit in 2017 and report on the results in our October report.
What we concluded
The AER and the department have implemented our recommendation by conducting an assessment to understand how the oil and gas industry was managing its ICS security risk and the controls that the operators have implemented to secure their ICS.