Process control security the BP experience

The paper presents the BP journey on how they improve the security state of process control system. A large organisation, having 400+ sites spread across a globe, for example is costly and difficult to visit and conduct a security testing. The solution is to create a small dedicated team of digital security experts and control engineering to provide a group centre of excellence (CE). The CE developed a process and tools for the sites to use risk assessment tool and remediation cookbook.