Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

ONG-ISAC was created to help oil and natural gas companies exchange cybersecurity threat information and coordinate responses. The initiative’s development began within an American Petroleum Institute (API) working group, with an agreement and incorporation in 2013; its public formation was announced in 2014. The organization later expanded its stated scope and became ONE-ISAC, the Oil and Natural Energy Information Sharing and Analysis Center.

What ONG-ISAC was designed to do

The Oil and Natural Gas Information Sharing and Analysis Center (ONG-ISAC) was an industry-led effort to make cybersecurity information useful across companies responsible for energy production and delivery. Its initial purpose was practical: help members identify threats, share information about vulnerabilities, and coordinate protective action and response.

A 2014 account in PE Magazine says the effort had been under development for more than two years through API’s Information Technology Security Subcommittee. API provided seed funding, and the organization was described as owned and operated by industry participants. The National Institute of Standards and Technology also referenced ONG-ISAC’s establishment in 2014 as a way to share information on cyber incidents, threats, vulnerabilities, and responses.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

API Vice President Kyle Isakower said the center would help companies identify and respond to threats against energy production and distribution systems, including refineries and pipelines, while staying connected with law enforcement. The 2014 report also quotes founding director Curt Craig, a Hunt Oil executive, describing the challenge the effort aimed to address: “We struggled for a while figuring out how to be able to share information without there being attribution.”

How the formation dates fit together

The dates describe separate milestones rather than conflicting formation claims. ONE-ISAC’s retrospective history places an agreement among API IT Security Subcommittee working-group members to develop an ISAC, as well as ONG-ISAC, Inc.’s incorporation, in 2013. The trade publication’s 2014 account describes the public announcement of the organization’s formation.

The 2014 announcement reported that more than 30 companies had pledged to become members and that basic member services were expected to begin by October 2014. Those figures describe the announcement period, not the organization’s current membership or present service status.

How the original information-sharing model worked

The initial design addressed a central problem in cyber threat sharing: companies need useful details, but may be reluctant to disclose sensitive information or identify themselves. The 2014 account said members could submit information securely, either anonymously or with attribution. The planned exchange extended beyond member companies to other ISACs, vendors, and the U.S. government.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

ONG-ISAC’s announced functions included circulating threat and vulnerability information, issuing urgent alerts, providing access to expertise, helping evaluate risk, sharing security guidance, and coordinating industry response. These were the center’s stated aims at formation; they should not be read as a guarantee that every capability was available to every company at that time.

How ONG-ISAC became ONE-ISAC

The organization now uses the name Oil and Natural Energy Information Sharing and Analysis Center (ONE-ISAC). Its FAQ explains that it changed the name to reflect a broader focus that includes alternative and renewable energy companies, specifically solar, wind, and hydrogen. The FAQ says the mission continued under the expanded scope.

ONE-ISAC describes its current mission as coordinating and communicating trusted, timely cyber threat information to help protect energy exploration, production, transportation, refining, and delivery systems. Its membership description includes oil and gas companies, alternative and renewable energy companies, energy services and supply businesses, and upstream, midstream, and downstream organizations, subject to membership requirements.

What ONE-ISAC says it provides members

The organization’s current membership pages describe a service model centered on secure communications and actionable intelligence. The listed offering includes:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Secure platform accounts and encrypted real-time communications.
  • API access and automated STIX/TAXII information exchange.
  • Threat feeds, indicators, alerts, analysis, and reports.
  • Anonymized submissions and requests for information.
  • Mitigation guidance, briefings, best-practice resources, and connections to experts and peers.

These are the organization’s published descriptions of member services. The pages reviewed do not state current membership fees or a current total number of members.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Historical membership and incident figures

ONE-ISAC’s timeline records the following member counts at specific points in its history. They are dated snapshots, not current totals.

Milestone Reported figure
July 2015 20 members
February 2016 27 members
February 2017 39 members

ONE-ISAC’s current site text also cites 290 ICS-CERT incidents in fiscal year 2016, including 59 attributed to the energy sector. This is a historical figure attributed to ONE-ISAC, not a measure of present-day incident volume. In the 2014 formation coverage, Isakower called computer-based attacks “one of the fastest-growing threats to American businesses and infrastructure”; that was his contemporaneous characterization, not a current statistical finding.

Sources and further reading

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.