1. SCADA John F. Lipka USA Security Lead Encana Oil & Gas (USA) Inc

2. Acronym - SCADA What does SCADA stand for? Supervisory Control And Data Acquisition Technologies used to control and collect data from remote locations.

3. SCADA in the Natural Gas Industry SCADA is used to bring oil and gas production volumes from the field to the office for accounting, control, marketing, measurement and monitoring purposes.

4. Before SCADA in the Natural Gas Industry Grease books and notes Manual entry - Excel Phone in or radio in information No monitoring or control ability More window time No callouts for any kind of alarms

5. SCADA - Overview

6. Field Site

7. SCADA - Field Hardware

8. SCADA Hardware

9. Remote Location Equipment Measure and control the process.

10. Communications Equipment RADIO Satellite Cell Modem Weather Balloon and Radio

11. Communications Communications is the backbone for SCADA.

12. SCADA – HMI’s Monitor and interact with the data CygNet – Human Machine Interface

13. SCADA - HMI

14. SCADA – HMI’s

15. Camera’s

16. Summary Used for monitoring and/or control Regional ONG Control Centers vs. Remote Access Provides faster response and data for timely decision making Better decisions with more information Communication is the heart of a SCADA system 900Mhz Radios Spread Spectrum, freq hops w/in a band based on a algorithm Focus is on I &M

17. Security Concerns Consolidation of above ground field assets upstream and midstream I&M Technicians “keys to the codes” Lease Operators aka Pumpers route Access to Company Intranet via public portal firewall (firewall attack SOP) Local Safeguards in Place (limit production will shut in the well, pipeline)

18. Security Concerns By design- react to high pressure, loss of production situations implemented locally There are limitations i.e., “false positive events” Spread spectrum inherently has more security built in to it (harder to steal) ONG movement into CNG, LNG, GTL stations, terminals, processing

19. Cyber Crime, Issues, Threats Phishing get an employee to do some thing or a piece of propriety information (personal or company) FCI- China technologies, AP, source code, new plays Tool to advance criminal activity counterfeit royalty checks, MF, WF violations FBI InfraGard

20. Questions?