Research on Cyberspace Protection Strategy of Industrial Enterprises under the Background of Digital Transformation—China National Petroleum Corporation Case Study

School of Cyber Science and Engineering, Sichuan University, Chengdu, Sichuan, 610207, China

^* Corresponding author: fenglian@ldy.edu.rs

Abstract

This research uses the China National Petroleum Corporation (CNPC) as a case study to explore the cybersecurity measures of industrial businesses amid digital transformation. As the rapid adoption of digital technologies reshapes the oil and gas sector, the study underscores the critical importance of robust cybersecurity frameworks. The case description delves into CNPC’s current state of development, and the significant cybersecurity challenges it faces during its digital transition, such as internal threats, outdated infrastructure, and vulnerabilities in industrial control systems. The study identifies several critical issues, including a lack of cybersecurity awareness, limited capabilities for responding to cyber incidents, and inadequate integration between information technology (IT) and operational technology (OT) security. These challenges are largely driven by the swift pace of digital transformation, dependence on legacy systems, and the evolving nature of cyber threats. To address these concerns, the study offers several strategic recommendations: moderating the speed of digital transformation, fostering IT and OT security convergence, enhancing employee cybersecurity awareness, and fortifying the security of industrial control systems. The findings emphasize that aligning digital innovation with cybersecurity is essential to ensure that the implementation of new technologies does not compromise safety or operational integrity. For CNPC and other industrial enterprises, the study provides valuable guidance on safeguarding critical infrastructure and maintaining operational resilience in an increasingly digital world.