Security Management for Oil and Gas Facilities Training Course

Duration 5 days 10 modules · 33 contact hours
Level Intermediate Certificate on completion
Who attends Security Managers, HSE Managers and others
Fee from USD 1,100 KSh 95,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 7 Nov 2026 Course code SD-SM-006

Before you join: Participants should have basic familiarity with oil and gas facility operations, site access arrangements or HSE management responsibilities.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Oil and gas facilities face a changing mix of security threats: theft of product and equipment, unauthorised access, sabotage, civil disturbance, insider activity, cyber-physical interference and attacks on personnel or critical assets. A weak security arrangement can interrupt production, expose workers and communities to harm, compromise emergency response and create costly contractual, regulatory and reputational consequences. Security managers must protect high-value, high-hazard sites while maintaining safe access for employees, contractors, visitors, suppliers and emergency services.

This course develops the practical methods required to assess threats, identify vulnerable assets, design proportionate controls and manage security operations at upstream, midstream, downstream and LNG facilities. Participants apply API RP 780 security risk assessment principles, ISO 31000 risk management concepts and security-in-depth design to realistic facility scenarios. The programme covers security governance, asset criticality, guard-force management, access control, surveillance, perimeter protection, journey management, contractor screening, incident command, investigations and security performance measurement.

Teaching combines focused instructor briefings with oil and gas cases, facilitated group analysis, table-top incident simulations and structured planning sessions. Participants work with realistic site maps, threat reports, access records and incident information to make security decisions under operational constraints. Each participant leaves with a completed security risk assessment, a site security management plan outline, control-selection criteria, incident reporting tools and a personal application plan for their facility.

The course is suited to professionals responsible for facility security, HSE, operations, emergency response, asset protection and contractor management. It is particularly relevant where facilities operate in remote areas, politically sensitive locations, shared industrial zones, marine terminals or areas affected by criminal activity.

What you will be able to do

  • Conduct an API RP 780-aligned security risk assessment for an oil and gas facility
  • Classify critical assets using consequence, vulnerability and threat-based prioritisation
  • Design security-in-depth controls for perimeters, access points and critical process areas
  • Develop a site security management plan with roles, procedures and escalation thresholds
  • Specify guard-force deployment, post orders and contractor security supervision requirements
  • Apply incident command principles to security events affecting facility operations
  • Investigate security incidents using evidence preservation, interview planning and root-cause analysis
  • Measure security performance through leading indicators, assurance reviews and corrective-action tracking

Benefits of attending

For you

  • Produce defensible security risk assessments for operating facilities and planned projects
  • Make proportionate control recommendations based on documented threat and vulnerability evidence
  • Lead clearer discussions with operations, HSE, contractors and external security providers
  • Respond to security incidents with defined roles, escalation routes and evidence controls
  • Build a practical portfolio of security management documents for workplace use

For your organisation

  • Improved protection of critical process assets, product inventories and utility systems
  • More consistent site security decisions based on documented risk criteria
  • Reduced exposure to theft, unauthorised entry, sabotage and insider incidents
  • Better coordination between security, operations, HSE and emergency response teams
  • Stronger assurance evidence for client, insurer, regulator and corporate security reviews

Course modules

10 modules over 5 days

Participants can establish security responsibilities, policy requirements and decision routes for a facility.

  • Security objectives linked to people, process safety, production and asset protection
  • Upstream, pipeline, terminal and refinery threat profiles compared systematically
  • Security governance roles for corporate, site, contractor and public authorities
  • Policy hierarchy from corporate standards to post orders and local procedures
  • RACI matrices for security decisions, escalation and control ownership
  • Legal duties, human rights considerations and proportional use-of-force principles

Participants can identify, validate and prioritise security threats using structured intelligence methods.

  • Threat categories covering criminal, activist, insider, terrorist and cyber-physical activity
  • Source evaluation using reliability and information-credibility assessment codes
  • Threat registers recording actors, intent, capability, opportunity and indicators
  • Pattern analysis from incident logs, local reporting and security observations
  • Information-sharing protocols with police, intelligence agencies and neighbouring facilities
  • Warning indicators triggering security posture changes and management notification

Participants can complete a structured security risk assessment using API RP 780 principles.

  • API RP 780 assessment stages from asset definition through treatment selection
  • Critical asset identification using safety, production, environmental and societal consequences
  • Threat, vulnerability and consequence scoring within a security risk matrix
  • Attack-path analysis from adversary entry point to target objective
  • Risk acceptance criteria, residual-risk statements and accountable approval authorities
  • Security risk registers linking treatments, owners, deadlines and assurance evidence

Participants can select layered physical protection measures for critical facility areas.

  • Security-in-depth layers from outer boundary through critical asset protection
  • Perimeter barriers, gates, lighting and intrusion detection selection criteria
  • Delay-time calculations matched to guard response and police support
  • CCTV coverage plans addressing detection, assessment, identification and recording
  • Protection measures for control rooms, tank farms and utility compounds
  • Crime Prevention Through Environmental Design applied to facility layouts

Participants can design controlled entry processes for employees, contractors, visitors and vehicles.

  • Access zoning for public, controlled, restricted and critical areas
  • Credential issuance, badge verification and access-rights review procedures
  • Visitor pre-approval, escorting, induction and departure reconciliation controls
  • Vehicle inspection protocols for deliveries, fuel transport and contractor equipment
  • Personnel screening boundaries, background checks and privacy requirements
  • Insider-risk indicators, reporting routes and confidential case management

Participants can define guard-force requirements and manage contracted security services effectively.

  • Guard-force operating models: proprietary, contracted and mixed-service arrangements
  • Post orders defining duties, patrol routes, communications and escalation limits
  • Deployment calculations using risk exposure, response times and shift coverage
  • Guard competency matrices covering induction, drills, first aid and reporting
  • Contractor security specifications, service-level measures and audit rights
  • Supervisory inspections using patrol records, occurrence books and attendance data

Participants can manage security monitoring, communications and technology assurance processes.

  • Security operations centre functions for monitoring, dispatch and incident logging
  • Alarm management procedures preventing nuisance alarms and delayed response
  • Video management system retention, retrieval and evidential integrity requirements
  • Radio communications protocols, call signs and emergency channel discipline
  • Access-control system audits identifying dormant badges and permission conflicts
  • Technology maintenance schedules for cameras, barriers, alarms and backup power

Participants can coordinate an initial response to security incidents affecting operations.

  • Incident command roles for site security, operations, HSE and communications
  • Initial actions for intrusion, theft, sabotage, protest and suspicious packages
  • Dynamic risk assessment during evolving security and safety conditions
  • Lockdown, shelter-in-place, evacuation and controlled-access decision criteria
  • Liaison procedures with police, military, coastguard and emergency services
  • Crisis communications approvals, situation reports and family-notification boundaries

Participants can investigate security incidents and turn findings into verified corrective actions.

  • Incident classification distinguishing security events, near misses and intelligence reports
  • Evidence preservation for CCTV, access logs, photographs and physical exhibits
  • Interview planning using cognitive interviewing principles and witness chronology
  • Timeline analysis linking actions, alarms, communications and control failures
  • Root-cause analysis using five whys, barrier analysis and causal factors
  • Corrective-action registers with owners, verification dates and closure evidence

Participants can monitor security performance and prepare a focused facility improvement plan.

  • Leading indicators covering patrol completion, alarm testing and training currency
  • Lagging indicators for theft, breaches, response times and repeat incidents
  • Security audits using document review, observation, interview and sampling methods
  • ISO 31000 review cycles for changing threats and residual risks
  • Management review packs presenting risks, trends, decisions and resource needs
  • Ninety-day facility action plans with priorities, owners and milestones

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. API RP 780-aligned security risk assessment template
  2. Facility security management plan outline
  3. Critical asset protection prioritisation model
  4. Access control and visitor management checklist
  5. Security incident command aide-memoire
  6. Security assurance dashboard template

Who should attend

  • Security Managers — responsible for site protection programmes and security team performance
  • HSE Managers — coordinating security risks with process safety and emergency arrangements
  • Operations Managers — maintaining secure production while controlling operational access
  • Facility Managers — overseeing physical protection of buildings, utilities and critical assets
  • Emergency Response Coordinators — managing security incidents that affect site response
  • Contractor Management Personnel — setting security expectations for suppliers and workforce providers

Skills and tools covered

Security risk assessmentCritical asset protectionAccess control designGuard-force managementSecurity incident commandSecurity assurance

Tools and standards

API RP 780, ISO 31000, RACI matrix, Crime Prevention Through Environmental Design

How the course runs

Training methodology

The course uses short instructor briefings to introduce methods, standards and control options, followed by facilitated case work based on upstream sites, pipelines, terminals and processing facilities. Participants analyse threat information, site layouts, incident records and access-control issues in small groups. Table-top simulations test decision-making during intrusion, protest, theft and suspicious-package events. Structured application planning helps participants translate course outputs into actions for their own facilities. Trainers adapt examples and discussion depth to the participants’ operating context.

Requirements and prerequisites

Participants should have basic familiarity with oil and gas facility operations, site access arrangements or HSE management responsibilities. Experience in security, operations, facilities, emergency response, logistics or contractor management is useful. Participants should understand common operational terms such as permit to work, control room, muster point and contractor induction. Prior security qualifications, military or law-enforcement experience, technical design skills and knowledge of surveillance systems are not required. The course explains the relevant security methods and standards before applying them to facility cases.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants need basic familiarity with oil and gas operations, facility access or HSE responsibilities. Previous security training, military service or law-enforcement experience is not required.

Bring a laptop or tablet if possible, plus any non-sensitive site procedures, access-control issues or security incident themes you wish to consider. Site drawings and security documents should only be shared where your employer permits this.

It suits security managers, HSE personnel, operations managers, facility managers and emergency response coordinators working with oil and gas assets. It also benefits personnel who oversee security contractors or contractor access.

This course focuses on high-hazard oil and gas facilities, where security failures can affect process safety, production continuity and emergency response. Cases and tools address refineries, terminals, pipelines, upstream installations and critical process areas.

Participants can use the risk assessment template, access-control checklist, incident command aide-memoire and assurance dashboard after the course. The application plan helps identify the first actions, owners and evidence required at their facility.

Each training day runs from 08:30 to 16:30 and provides about 6.5 contact hours. Time is divided among instructor input, facility cases, group analysis, incident simulations and application planning across ten modules.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.

Ask on WhatsApp info@skillsetdevelopment.com

Related courses in Security Management