#6fbb44

Energy firms face fast-changing threats, but they still must keep plants running. At the same time, new rules keep expanding. So leaders need security help that fits their real risks, not a fixed package.

This article shares lessons from Annie McIntyre, Chief Security Officer at EverLine - Energy's Technical Stack.

Annie has experienced this change from multiple angles. She started her career on the Department of Energy-funded Human Genome Project, then moved into defence work that supported key U.S. Army systems.

Later, at Sandia National Laboratories, she entered the oil and gas sector as critical infrastructure protection expanded rapidly. Those experiences shaped her path. She is currently the Chief Security Officer at EverLine - Energy's Technical Stack.

She plays a central role there, guiding teams that protect operational systems across pipelines, rail, maritime, and other high-stakes areas.

In this article, you’ll learn why operational technology (OT) security matters, how trust-driven selling shapes marketing, and how Everline uses digital channels and AI while staying careful with sensitive data.

Keep reading for Annie’s clear guidance on this topic. (And check out the full podcast episode here.)

“Security through obscurity. And that was changing.”

Energy security shifted when once-isolated systems became connected. Standard operating systems and distributed setups raised exposure. That change forced teams to treat security as a core business need.

Key drivers of the shift include:

  • More connected operational environments and remote access.
  • Higher stakes from business disruption and safety risk.
  • A faster pace of threat changes across quarters.

Regulation then accelerated the urgency. Pipeline rules turned more aggressive after major incidents. Rail and maritime rules also expanded. Insurers and partners now expect proof of due care. Supply chains are also under increased scrutiny.

This pressure doesn’t fade. Once rules exist, they rarely roll back. That pushes firms to keep improving programs, not “finish” them.

"They’re targeting those OT systems"

OT runs the physical process. It controls automation, sensing, and safety. Attackers target OT because it can stop operations and cause harm.

OT risk looks different than IT risk:

  • IT attacks often hit data and office systems.
  • OT attacks can disrupt physical output and safety.

Threat actors also vary. They range from nation-state groups to lone actors. That means defenses must cover many paths. Each site has a unique architecture, so security work stays specific. Still, strong OT security follows shared methods that matured over the years.

That focus explains Everline’s position. It stays “solely OT focused.” Many providers crowd the IT space. Fewer stay deep in OT.

"If you don’t address them together, you could have an open hole"

Everline groups security into one operating view. It treats cyber, physical, and human security as linked parts.

Here’s why that matters:

  • A remote cyberattack can accompany an on-site intrusion.
  • A perimeter breach can expose digital assets on location.
  • Weak training can defeat strong tools.

Everline organizes work across three segments: advise, connect, and secure. The “secure” segment encompasses cyber, physical, and human security.

It can include:

  • Policies and procedures.
  • Tools like surveillance and access control.
  • Training, vetting, and employee protection.

This combined view helps reduce gaps and allows leaders to prioritize spending. Many clients want cost control, so they value clear tradeoffs.

"They’re actually going to call up a colleague"

Energy security selling runs on trust. Clients share their weakest points, so they choose partners carefully. That reality makes referrals powerful, but it also limits growth.

Referral-led growth creates clear limits:

  • Fewer “top of funnel” chances from cold outreach.
  • Slower brand lift for newer names.
  • Lower returns from booths and broad events.

Clients often call peers during urgent moments. They ask, “Who are you using?” That favors long-term relationships. It also makes positioning harder. Everline aims to act like an advisor, not a vendor.

The hard part is this. Many buyers don’t know what they need. They want help defining risk and then selecting the right fixes. They don’t want a menu.

"It would’ve been easier to build a new house from scratch"

Everline grew by rolling up several firms. That creates scale, but integration takes real work. Admin and standard processes can slow teams down.

Common integration challenges include:

  • Picking which process becomes the standard.
  • Syncing systems and workflows across teams.
  • Helping teams explain each other’s services.

Cross-sell adds another layer. Many clients use two or more service lines. Teams must clearly explain the full set of options. That only happens with planned training and shared learning.

Everline uses internal training days and shared time across teams. It also refines business development coverage by segment. This keeps teams aligned and helps capture more share of wallet.

"We can’t operate without AI"

Everline views AI as a must-have, but it must remain secure. Many operational environments run on closed networks. So AI use in OT often happens “in a bubble.”

On the business side, AI supports speed:

  • Building target lists based on asset types.
  • Spotting newly regulated assets or recent threats.
  • Cutting hours of manual research into minutes.

This supports clearer outreach. It helps teams define the problem and propose the right help. That said, security work demands tight rules. Everline began with a strict AI policy and refined it over time.

AI also introduces new options, such as on-premises models. Firms weigh cost, guidance, and timing. Wait too long, and you miss chances. Start too soon, and you may spend wrong.

Explore more ideas and practical advice on this topic.

Catch the full conversation with Annie McIntyre on The HEX-Files, HexaGroup’s energy marketing podcast for leaders who want real results.

Listen Now:

Good to grow? Gauge your readiness in 10 minutes flat.

BBN

Unlock growth without boundaries

Need region-specific fresh eggs and flying lessons? Learn more about BBN, the agency that unites co-pilots from all corners of the sky.