Securing the Flow: A DAMA-ISO 27001 Cybersecurity Framework for Oil & Gas Data Pipelines
S. Al Hosan · 2025
Scope To create a comprehensive cybersecurity framework for the oil and gas industry that combines the ISO 27001 controls with Data Management Body of Knowledge (DAMA-DMBOK) principles. This framework aims to protect data pipelines from cyber threats and ensure data transferred in a secure and a high-quality which will enhance operational efficiencies and support decision-making. Methods The proposed framework integrates DAMA’s structured approach to data governance including data security and data quality with ISO 27001’s systematic information security management. The method highlights the ISO 27001 controls and DAMA Data Security and Data Quality activities. Results, Observations, Conclusions The integration of ISO 27001 controls and DAMA created a cybersecurity framework that comprehensively addresses data security and data quality across the lifecycle of oil and gas data pipelines. Observations highlight how DAMA principles of data security and quality align with ISO 27001’s security requirements, enhancing both data security and quality. Through this combined approach, companies can achieve greater resilience against cyber threats, maintain data security and quality, and ensure alignment with international standards. Novel/Additive Information This framework represents a novel approach by bridging the gap between data management and information security, specifically for the oil and gas sector. It introduces a unique model for data pipelines by combining data security and data quality strategies.