Operations Security at Saudi Aramco? Zero.
The world's largest oil producer Saudi Aramco has apparently suffered a cyber attack according to this announcement on its Facebook page:
Saudi Aramco Responds to Network Disruption
On Wednesday, Aug. 15, 2012, an official at Saudi Aramco confirmed that the company has isolated all its electronic systems from outside access as an early precautionary measure that was taken following a sudden disruption that affected some of the sectors of its electronic network.
The disruption was suspected to be the result of a virus that had infected personal workstations without affecting the primary components of the network. Saudi Aramco confirmed the integrity of all of its electronic network that manages its core business and that the interruption has had no impact whatsoever on any of the company’s production operations.
The company employs a series of precautionary procedures and multiple redundant systems within its advanced and complex system that are used to protect its operational and database systems. Saudi Aramco IT experts anticipate resuming normal operations of its network soon.What's shocking in terms of operational security (OPSEC) is that Aramco employees are publicly commenting on the event and adding information that wasn't disclosed in the announcement, such as:
- (name and position deleted): "My hard disk crashed, not cool"
- (name and position deleted) "I lost everything I did for this week too"