A recently concluded audit showed some gaps in terms of data protection by DGPC, an institution under the Ministry of Energy (Petroleum Division) responsible for oil and gas exploration licenses in Pakistan. DGPC stands for Directorate General of Petroleum Concessions. These audit findings revealed various cybersecurity problems that may threaten the integrity of valuable information in digital format.
Data Security Gaps Found at Pakistan’s Oil and Gas Body
According to the audit findings, DGPC needs stronger security policies and better procedures to protect sensitive data from possible risks. The audit also found that the institution lacks proper cybersecurity policies for managing data access control, encryption, and system changes. Such security vulnerabilities increase the risk of any unauthorized access to valuable data.
DGPC Cybersecurity Issues Identified After the Audit
According to the audit findings, DGPC does not have any guidelines for determining authorized persons to access confidential information and data protection. It is necessary to control access to important records because it guarantees that only authorized personnel has access to the records.
Read more: Pakistan Boosts Cybersecurity for Banking Sector Amid Rising Threats
In addition, DGPC does not use multi-factor authentication. It is an important tool that guarantees identification of the user and adds an extra level of security. The Cybersecurity and Infrastructure Security Agency (CISA) also recommends the use of multi-factor authentication to improve account protection. In addition, DGPC does not use multi-factor authentication, which is an important tool for verifying user identity and adding an extra layer of security. The audit recommended introducing this feature to help reduce security threats and improve protection against unauthorized access.
Issues with Data Monitoring and Encryption
According to the audit, the DGPC lacks automation tools for monitoring cyber threats. Inadequate monitoring tools can make it difficult for the organization to monitor potential security threats on time.
The report also found that DGPC does not use proper encryption measures for technical data. Encryption converts data into an unreadable format and helps prevent unauthorized people from accessing it. The National Institute of Standards and Technology (NIST) provides cybersecurity guidelines that highlight the importance of strong encryption practices. Based on the findings, inadequate encryption can create vulnerabilities to data breaches.
Problems with Data and Records Management
In addition, there were some issues with regard to financial and technical data management. Financial data kept on the management system were not being updated regularly and thus might cause some difficulties in record keeping.
The audit found weaknesses in how DGPC monitors financial data submitted by companies in the oil and gas industry. The current DGPC software cannot fully track company project activities. The report also highlighted issues with proper record-keeping and the overall management of digital data.
Worries About Quality of Technical Data
The report expressed worries regarding the quality and integrity of technical information kept at DGPC. The audit showed that the organization lacks an adequate mechanism for validating and verifying technical documents. The report also indicated that there is poor monitoring of technical data inputs, including 2D and 3D seismic data used in the search for oil and gas.
Read more: World Bank Approves $376 Million for Pakistan Power Grid Upgrade
The report advised DGPC to introduce record validation and monitoring systems to improve the quality and accuracy of technical information. To handle the identified challenges, the audit advised the improvement of cybersecurity mechanisms at DGPC. These include enhanced data protection policies, access control mechanisms, and activity monitoring systems. Proper monitoring of logs to track activities within the system was advised. This could be helpful in protecting critical information in the energy sector.
News source eTimes Pakistan.
