Protecting Critical Infrastructure

Malware. Data breaches. Insider threats. Cyber espionage. It's not a question of if you will be attacked but when. In fiscal year 2015, ICS-CERT responded to 295 incidents within the energy sector experiencing the second highest number of incidents out of all 16 US critical infrastructure sectors.1 As cyber threats evolve, the oil and natural gas industry faces unique challenges with the increasingly interconnected delivery of services to a common consumer and supplier base.

To protect our nation's critical infrastructure, the Oil and Natural Gas Information Sharing and Analysis Center (ONG-ISAC) is being created to provide shared intelligence on cyber incidents, threats, vulnerabilities, and associated responses present throughout our industry.

Facilitating Information Sharing For Our Members

Building off the best practices in other sectors and fusing that with deep knowledge of the oil and natural gas industry, the ONG-ISAC serves as a dynamic cybersecurity hub for members to communicate and coordinate.

The mission of the ONG-ISAC is structured around four cornerstones:

1. Anonymous submissions 2. Authenticated information sharing
3. Industry owned and operated 4. Protection from Freedom of Information Act (FOIA) disclosure and anti-trust violations

(1) ICS-CERT Year in Review 2015.

Strengthen Your Cybersecurity Enterprise

Why Join the ONG-ISAC: Member Benefits

Our Membership Features

  • Guided, anonymous information sharing via a secure web portal
  • Automated sharing of machine-readable threat indicators
  • Real-time notifications for near real-time analyses
  • Open access to community leaders and security analyst experts
  • Discover threats and vulnerabilities from ONG-ISAC members, other ISACs, vendors, and the U.S. Government, all in one place
  • Coordinated response between members during industry incidents

Your Performance Advantage

Detect
Quickly detect or respond to threats before they impact your enterprise

Learn
Learn from others to decrease your overall risk, increase safety, and avoid loss of revenue

Protect
Protect your reputation and position your organization ahead of attackers

Improve
Avoid data overload and improve critical decision making

Information Sharing

Information Confidentiality
Get access to shared intelligence in near-real time, in a trusted and secure manner.

Confidentiality is essential in creating a secure and trusted environment. The ONG-ISAC will employ the Traffic Light Protocol for information sharing. Members have the option of submitting information either anonymously or with attribution. Only ONG-ISAC members will receive information that is classified as Red or Amber; non-members will only receive information that is classified as White.

Traffic Light Protocol for Information Sharing
Authorized Information Recipients Restricted to a defined group (e.g., only those present at a meeting). Information labeled 'Red' should not be shared with anyone outside of the immediate group. Confidential. This information can be shared with ONG-ISAC members. Information within this category can be shared with ONG-ISAC members, and government and strategic partners. Information labeled 'Green' should not to be shared in public forums. This information can be shared freely, and is subject to standard copyright rules.

 
 

 
 

Membership

Who Should Join ONG-ISAC

All oil and natural gas industry companies (private or public) and recognized trade associations with a presence in North America are eligible* to join the ONG-ISAC, including:

  • Integrated Oil Companies
  • Natural Gas Companies
  • Upstream Companies
  • Mid-stream Companies
  • Down-stream Companies
  • Appropriate Industry Associations
  • Energy Service and Supply Companies Supporting ONG Industry Segments

* Subject to ONG-ISAC Restrictions

Note: Membership in API is not required.

Membership Fees

There are five ONG-ISAC membership levels to choose from based on an organization’s annual revenue. Membership fees are a vital source of ONG-ISAC’s operating capital. We encourage you to consider “buying up” to help create and sustain this crucial industry resource.

Tier Annual Corporate Revenue Annual Fee
Platinum ≥$10 billion $50,000
Gold ≥$5 billion to <$10 billion $25,000
Premium ≥$1 billion to <$5 billion $10,000
Standard ≥$250 million to <$1 billion $5,000
Basic <$250 million $2,000

Contact Us

Interested in becoming a member?
Want to learn more?