Pipeline Under Pressure: Ransomware at a Refined-Products Operator
The pipeline is fine. The business systems that schedule, track, and bill what flows through it are not. And that distinction — between operational technology and everything wrapped around it — is about to determine whether a region has fuel this week.
Drawn from the incident that redefined critical-infrastructure cyber risk, this advanced scenario confronts your leadership with the questions that made history: can you safely ship what you can't bill or verify? What do you tell federal partners, governors, and a public already panic-buying? And how do you weigh a ransom when the cost of downtime is measured in regional impact?
For energy and pipeline operators, this is the tabletop your regulators, boards, and customers assume you've already run.
1 hr 30 minAdvanced
Utilities & energyNERC CIPNIST CSFTSA Security Directives
What this scenario tests
- Whether your team can decide to keep operating — or shut down — when IT is compromised and OT is unverified
- How your organization manages federal partners, regulators, and governors all calling at once
- How your leaders frame a ransom decision when the public interest is on the table
- Whether your restart criteria protect you from announcing a recovery you can't deliver
Who it's for
Executive / C-Suite · IT & Security Team · Operations Team · Communications / PR