Author: Luis Gutierrez
Product Manager for Cloud Services
Author: Kevin Ellmore
Senior Manager, iEnergy Security & Incident Management
For E&P companies, data is a crucial entity that impact their operational and financial standing. Moreover, data acquisition is an expensive endeavor for E&P companies – for instance, the monetary value of seismic survey and interpretation data can run into millions of dollars. Data related to reserves estimation and potential/production volumes carry financial implications and as such requires safeguarding. Therefore, it is only natural for E&P organizations to be mindful of the security of their data.
When organizations ponder the security of their data in the cloud, concerns fall into two main categories: one is the perception that cloud technology could be vulnerable to cyber-attacks which could compromise the security of their data and work environments, and the other is how to negate potential security threats.
These are reasonable areas of concern, and we address the challenges that accompany them with SOC2-compliant practices, every hour, every day:
Multi-layer approach to stop threats and safeguard data
Halliburton maintains a robust IT security program that encompasses corporate policies, business practices, and external standards such as ISO and NIST. Our IT security program is guided by several industry-standard guidelines and best practices including ISO 27001, the NIST (National Institute of Standards and Technology) Cyber Security Framework (CSF), and SOC2.
By partnering with Microsoft Azure and Amazon Web Services we went through rigorous testing for two-years to gain SOC2 Type I certification.
Our customers’ data is as important as our own, so we adopted an approach and a set of tools to manage security compliance, observability, and traceability. We transformed our traditional organizational structure for Development, Operations, and Security and combined them to create a unified, highly effective DevSecOps team.
Continuous Integration & Deployment Model
iEnergy Hybrid Cloud, the E&P industry’s first dedicated hybrid cloud, was designed to deploy, integrate, and manage sophisticated E&P cloud applications, such as DecisionSpace® 365. It offers a comprehensive set of fully managed cloud services that helps accelerate deployment of the latest technology, optimize system usage, and reduce downtime.
For more detailed and in-depth information about the security robustness of the iEnergy Hybrid Cloud, download
the full whitepaper today!