The most alarming example so far: a malware attack in 2014 that compromised the operations of more than 1,000 energy companies in 84 countries, including the United States, Spain, France, Italy, Germany, Turkey and Poland. This cyber campaign, reportedly waged as a means of industrial espionage, gave hackers the ability to cripple wind turbines, gas pipelines and power plants at the click of a mouse.

One reason is that the industrial control systems that support energy companies are no longer as sealed off from external threats. Electric utilities depend on automated controls to run their grids, which are managed through interconnected network systems. Oil and gas companies depend on data networks to manage facilities and to interpret seismic developments. Refiners, too, rely on data networks to manage meters and to analyze their customers’ needs.

What can be done?  Read our full article on the Oliver Wyman Ideas app.

Cyber-risk management