CASE STUDY

Oil & Gas Major: ICS Cybersecurity for Refining Operations

An integrated oil & gas company hardened ICS cybersecurity across 14 refineries. Cyber-incident detection time at the OT layer reduced from days to minutes.

May 9, 2026 · 2 min read · By admin

At a glance

Industry: Energy
Topics: Cybersecurity · SecOps / GRC
Published: May 2026
Headline outcome: 800 NIST SP 800-82 audit-readiness

Measured outcomes

What this programme actually delivered.

800

NIST SP 800-82 audit-readiness

14 refineries with consistent OT cybersecurity baseline

The challenge

An integrated oil & gas company’s 14 refineries had limited OT cybersecurity tooling. ICS attacks (e.g. Triton/Trisis style) had become a board-level concern.

What we built

OT-specific cybersecurity stack — passive network monitoring (Claroty/Dragos), threat-detection rules tuned for ICS protocols, IT/OT bridge for incident escalation. NIST SP 800-82 control mapping.

Outcomes

OT-layer incident detection: days → minutes
NIST SP 800-82 audit-readiness
14 refineries with consistent OT cybersecurity baseline
Cross-refinery threat intelligence sharing

Ready to talk
about your next initiative?

Connect with a Mergen architect to scope an outcome-led engagement.

💬

Oil & Gas Major: ICS Cybersecurity for Refining Operations

What this programme actually delivered.

The challenge

What we built

Outcomes

Ready to talk
about your next initiative?

Talk to an Expert

Get a Free Assessment

View Success Stories

Start a Project

Oil & Gas Major: ICS Cybersecurity for Refining Operations

What this programme actually delivered.

The challenge

What we built

Outcomes

More from Case Study

Commercial Real Estate REIT — Facilities Workflow Across 1,400 Properties

Major Airport Authority — Operations Platform Modernization

Global Shipping Line — Port-Call Management on Now Platform

Ready to talkabout your next initiative?

Talk to an Expert

Get a Free Assessment

View Success Stories

Start a Project

Ready to talk
about your next initiative?