..

This design element requires flash & JavaScript to be enabled to play. Download the latest version of flash from Adobe.com.

Oil & Gas Project Assurance

commissum is a company one hundred percent focused on the provision of information security advice and services. Our team has been providing the full range of these services to a broad cross-section of businesses and government organisations for over twenty years.

commissum'ko-mis-sum, n. that which is entrusted [Latin]

Information Assurance for Asset Tracking System - Oil & Gas Sector

commissum worked closely with all stakeholders in this very complex project, to ensure the final security of the system.

Client

This was a flagship collaborative project to provide a web based asset tracking system that all members of the consortium and their suppliers would use to arrange and monitor transportation and location of assets (including people) on a global basis.

Client Requirement and Business Drivers

The system was required to provide a variety of access levels to the various user companies and individuals within them, but to at the same time ensure the protection of commercially sensitive and private data. Transportation was to be booked, training and health and safety records maintained, and the location of all individuals maintained while off-shore.

Enabling

  • the systems used by all members of the consortium were different but essentially performed the same function - successful roll-out of the project would enable all to securely take advantage of the efficiencies introduced by adoption of a commonly hosted and supported system
  • the system would provide a common set of processes for booking transportation, ensuring training and health and safety records were up to date, and recording the location of assets while off-shore – this could only be achieved if all consortium members and users were confident in the availability, integrity and confidentiality of the information held

Risk Reduction

  • information held would be potentially commercially sensitive, relating to the movement of personnel around the globe
  • personal data in the form of employee and contractor records led to a high priority being put on security to comply with data protection requirements of multiple countries
  • a final concern related to terrorism, with locations of staff while on flights and at offshore locations being held within the system – also potential issues with availability through potential attacks from some more extreme environmental groups

commissum Services Provided 

commissum was engaged early in the project to provide a range of security related services. These included:

  • early briefing of the 3rd party project development team on issues relating to development of secure applications
  • audit of developer’s processes for development
  • design review for security throughout the project lifecycle
  • security testing at Factory Acceptance
  • regression testing in the final phases prior to go-live
  • final Site Acceptance Application and Infrastructure Security Testing

commissum worked closely with all stakeholders in this very complex project, to ensure the final security of the system. The management organisation that acted on behalf of the consortium, a major coordinator of collaborative projects in the oil and gas sector continues to be a valued partner with other collaborative ventures currently in progress.

Get in touch with one of our security consultants today

  • No obligation
  • Expert advice
  • Tailored solutions
"commissum recently provided us with services to assess a web application and supporting infrastructure. I was impressed with the consultants throughout the project, by their technical knowledge, flexibility, open communication and willingness to go that extra mile. Of particular benefit was the sound advice given both during and after the engagement. By identifying vulnerabilities promptly, accompanied with practical recommendations on how to address them. We were able to implement improvements quickly. Good value, a job well done.”

JM, Infosec Analyst, International Investment Bank

"commissum was particularly responsive and the project was well managed under demanding conditions. I was very happy with the technical standard. Very good value for money as well”

Mr Kenneth Y, Head of IT Risk & Compliance, International Retail Bank

“We have used commissum for several years and their work has always been professional and delivered to a high standard. We appreciate their ability to readily interpret project requirements and to make a valuable contribution even when a project's budget is tight. commissum are easy to deal with and have the flexibility to manage changing time scales and requirements.”

Mr Iain R, Account Director, International Business Systems & Managed Services Company