The energy industry may not be the first sector someone thinks of in the world of security. However, critical energy infrastructure has become increasingly vulnerable to attacks by nation-states and organized international criminals. Energy companies are now employing risk management-based frameworks to address both cyber and operational security. Cyber enemies continue to get more sophisticated and versatile and it is imperative that the industry become more agile to respond to these threats. Additionally, there have been insider threats and energy infrastructure attacks which have been on the rise in aggregate.