OT Security – Asset Inventory and Vulnerability Analysis for Fuel Storage Facilities
GEFEBA conducted a comprehensive OT security analysis at 14 KRITIS-relevant tank farm locations for an international petrochemical corporation. The goal of the project was to provide transparency into the existing OT landscape, systematically identify potential security risks, and establish a robust foundation for future audit and compliance requirements. The main challenge was to inventory and assess a large number of different systems, network structures, software versions, and field devices across all sites without actively interfering with ongoing production processes. At the same time, risks related to vulnerabilities, outdated software versions, and end-of-life and end-of-support statuses had to be reliably identified and prioritized.
gefeba first conducted a structured on-site assessment of all OT networks and deployed assets. During this process, network topologies were documented, hardware and software versions were recorded, and detailed network diagrams were created for all locations. This was followed by a comprehensive vulnerability analysis. For this purpose, gefeba developed its own software solution that automatically compares information from vendor advisories, security bulletins, and BSI publications with the recorded assets and firmware versions. The data obtained was then evaluated by experienced OT security experts and analyzed in terms of criticality, network environment, and potential impact on operations. Based on this, prioritized recommendations for action were developed, encompassing both short-term measures to minimize risk and long-term strategies for further developing the OT security architecture.
Through this project, the client gained complete transparency into its OT infrastructure and the associated risks for the first time. In total, approximately 1,600 assets at 14 locations were inventoried, and more than 77,000 potential vulnerabilities were analyzed. This process led to the identification and prioritization of about 150 security-related vulnerabilities. The resulting catalog of measures serves as the foundation for internal decisions, future KRITIS audits, and the long-term improvement of the security architecture. Furthermore, it laid the groundwork for a long-term partnership, within which the identified measures will be implemented step by step and security at the sites will be continuously enhanced.
Why Customers
Choose to Work with Us
We develop customized solutions—from analysis through the engineering phase to commissioning and support. Our focus is on maximum functionality, on-time delivery, and durability.
Our project work is supported by collaborations with leading technology partners such as Siemens, Rittal, B&R, and Proxmox, which provide the technological foundation for our project results and help expand them.
