CYBER AND PHYSICAL SECURIT Y
ONEOK Pipeline Control
PROTECTING OUR ASSETS
ONEOK takes a cross-disciplinary approach to security, using systems and procedures to protect both physical and cyber assets, and to enhance business continuity and disaster recovery preparedness. Securing company assets is critical to ONEOK’s commitments to:
• Provide safe work environments for employees and contractors.
• Act as a responsible member of the communities where we operate.
• Provide reliable service to customers. • Create value for stakeholders.
SECURITY LEADERSHIP Security at ONEOK is governed by the Security Advisory team, an executive advisory committee composed of company officers from various business segments who meet regularly to evaluate ongoing security threats, define policy, set strategy and prioritize initiatives. ONEOK’s board of directors also receives regular updates on our company’s physical and cybersecurity efforts. Our vice president of security chairs this advisory team and leads work groups responsible for cybersecurity, physical security, building operations, risk management and business continuity.
CYBERSECURITY ONEOK’s cybersecurity program generally follows the guidelines of the widely utilized National Institute of Standards and Technology (NIST) Cybersecurity Framework and focuses primarily on corporate information security, industrial control system (ICS) security and physical security. ONEOK segments its networks into subnetworks to improve performance and security, and has business continuity and disaster recovery plans in place that allow for switching to redundant backup systems, alternative forms of communication and manual operation of assets. We also work collaboratively with the FBI and other relevant law enforcement resources to address cyberthreats. Our corporate network infrastructure includes an always-on VPN that gives employees secure, quick access to their applications and data while off-site. ONEOK’s commitment to providing safe remote access and use of cloud-based technology enabled business operations to continue uninterrupted as a result of work-from-home schedules implemented amid COVID-19. 39
