Right. AllThese companies and the Feds been asleep at the wheel for years now. And it's only gonna get worse. Companies won't even fill vacant cybersecurity jobs. Nor follow any best practices because at worse they'll get a slap on the wrist. If the government even audits them at all.
U.S. Has Ignored Pipeline Cybersecurity. Now You’re Paying the Price
Much of the original TSA best practices regulating pipeline cybersecurity were drafted shortly after 9/11—and many have been barely touched since then. The agency’s protocols outlining the roles of the different branches of the federal government in case of a pipeline security breach hasn’t been updated since 2010. Given how quickly the digital landscape of our lives has evolved in the past decade, let alone the sophistication of cyberattacks, the lack of attention is embarrassing.
Of what you said. Their security systems are ancient.
“as pipelines expand, companies can end up with a mix of technology — some parts built within the company and others brought in from outside, said Peter McNally, global sector lead at Third Bridge. Many large energy companies have been under pressure from investors to limit reinvestment in such assets, which can be decades old, he added. That can be a problem when dealing with modern criminals.”
and it’s always the “older” workers that are the (c-suite level management and board of directors) that are so resistant for adapting to technology upgrades - 2021 platforms but security network is stuck in the 1990s. Profit maximization at it’s worst.