The oil and gas (O&G) industry is not immune to these kinds of vulnerabilities. There are several reasons to believe that cybersecurity should be of concern to the O&G industry in Malaysia. It is also important to note that most players serving Malaysia’s O&G industry are small and medium-sized O&G services and equipment (OGSE) players. The O&G industry involves an integrated and complex upstream and downstream supply chain, which could result in a ripple effect if or when vulnerabilities in cyberspace occur. The O&G industry in Malaysia should increase cybersecurity efforts to mitigate these issues and to prepare for ESG and sustainability reporting in this space.