Security

We work in some challenging environments with fast-changing security issues.

Our aim is to protect our employees, partners and assets in a responsible manner, and to prevent any security-related disruption to our operations.

Our security team is closely integrated into the wider HSSEIA community, and our Security Policy sets out the responsibilities of our leadership and each of our business units.

Remaining responsive to a fast-changing security environment

Petrofac works in challenging environments with fast-changing security issues. Our aim is to protect our employees and assets in a responsible manner, and to prevent any security-related disruption.

Our security and crisis management team is closely integrated into

the wider HSSEIA community.

Our Security Policy sets out the responsibilities of our leadership and our business units and, with regards to crisis management, we aim to operate to the same standard as ISO22301:2019.

The success of our approach is demonstrated by the fact that, in 2019, there were no major security incidents to report.

Enhancing the protection we provide to our employees, partners and assets

To reflect the fast-changing security environment, we continue to review and refine our security approach. Developments during 2019 included:

  • Creating a new online security and crisis management toolkit
  • Raising awareness across the Group
  • Implementing a series of security assurance visits
  • Running a series of incident management exercises
  • Providing enhanced support to travelling employees 

Improving our cyber-security and data protection capabilities

In response to rapidly evolving data security risks, and to support Petrofac’s wider digitalisation initiatives, cyber-security and data protection continued to be an area of emphasis. Related initiatives included:

  • Increasing awareness of cybersecurity
  • Investing in secure infrastructure
  • Increasing our focus on industrial cybersecurity
  • Enhancing disaster recovery plans
  • Rolling out a new data labelling and protection

To reflect the quality of our approach, Petrofac was named ‘Middle East Enterprise of the year’ by EC-Council at the 2019 CISO Summit & Awards.

This programme of initiatives will continue to be stepped up during 2020, and the aim is to operate at the same standard as ISO270017.