Security Vulnerability Assessment (SVA) of Bapco Physical Assets - A Semi-quantitative Risk Analysis for Prioritization of Security Enhancement Engineering Projects

摘要

For enhancement of the security of physical assets at Bapco, a number of engineering projects were identified. These were at various stages of analysis and implementation when a decision was made to conduct a formal Security Vulnerability Assessment (SVA). A risk assessment study was carried out aimed at prioritization of the assets involved and potential enhancement measures. Security Department and security consultants (with participation of government security advisors) had previously carried out similar analyses and studies, and this risk assessment study was done as an extension to those studies. Included were core-business physical assets only. Cyber/data/information security, executive and personnel security, and non-core assets security were considered beyond the scope of this study. The methodology adopted herein has been based on that published in May 2003 by the American Petroleum Institute (API) in conjunction with the National Petrochemical & Refiners Association (NPRA) entitled: Security Vulnerability Assessment (SVA) Methodology for the Petroleum and Petrochemical Industries [1]. Also, the latest version of this API document (revised October 2004) was briefly checked while finalizing this paper. The method is similar to the one published previously by the Center for Chemical Process Safety (CCPS) of the American Institute of Chemical Engineers (AIChE) [2] [3].