Proactive Risk Management from IPRO

IPRO will be led by, and belong to, its natural gas and oil pipeline membership.

 The benefits are scalable -- all pipelines should join.

IPRO is different than other mechanisms dedicates to promoting pipeline cybersecurity because:

  • IPRO is a non-profit corporation and an exercise in pipeline self-regulation; all pipelines are eligible to join and support IPRO

  • IPRO provides an independent, ‘on the ground’ assessment of individual pipeline systems

  • Beyond standards, IPRO will deploy its 1400 “controls” that actually protect assets, consistent with individual pipeline needs and established standards and frameworks

  • IPRO will serve (1) the legitimate interests of government in national security, consistent application of standards, and implementation of actionable intelligence about cyber attackers AND (2) the interest of pipelines in predictable cyber regulatory policies and a rationalized audit process, the best cyber hygiene, access to best technical expertise at cost, communications with government, and collaboration across the industry on risk management strategies

  • IPRO promises to be a voice for pipelines with respect to the development of cybersecurity policy and regulation and will seek agreement with regulators about cyber compliance processes

  • IPRO will work with ONG I-SAC and ONGSCC and relevant regulatory agencies to communicate appropriate concerns and information about pipeline cyber vulnerabilities and business concerns

 

IPRO’s work will benefit pipelines by providing-

  • 1

    Independent and technically sound cyber assessments at cost, leading to controls for operational functions and assets

  • 2

    An independent voice for the sector in policy making circles

  • 3

    Savings on risk-sensitive insurance by reducing cyber vulnerabilities

  • 4

    Reduced regulatory risk when regulators have confidence in the quality of industry-driven pipeline cyber protection

  • 5

    Cross-industry training and education

  • 6

    A single point of contact for the sector when necessary for other sectors, policy makers, and technology innovators

  • 7

    The savings that will accrue from aggregating cyber resources, retaining expert technicians, and adopting a transparent, predictable approach

  • 8

    Support for under-resourced pipeline companies that lack cyber expertise and control systems to meet standards and best practices

young-trainee-engineer-checking-the-pressure-gauge-YGTKHKS.jpg

The IPRO Model is “future ready”

No other group or association is solely focused on pipeline cybersecurity, can provide access to best technical assessments and controls to its pipeline members at cost, or provides support that is customized to fit the needs of pipeline companies, including access to expertise and analysis that will be increasingly costly and unaffordable for individual companies without the scale and risk-sharing that IPRO can achieve with high degrees of pipeline participation.