Oilfield Site Security: Security Zones, Gates and Access Control
Key takeaways
- Security protects people and the facility from deliberate acts; safety protects them from accidents. On site the two work together.
- The site is divided into layers: outer perimeter, restricted zone and critical zone. The closer to the plant, the tighter the controls.
- Nobody enters without identity, a reason and authorization, and a visitor is always escorted by a responsible person.
- Vehicle searches take time: a two-lane gate at 6 minutes per vehicle passes only 20 vehicles an hour, so advance planning is essential.
- Every worker is part of security: if you see something unusual, report it and do not intervene yourself.
Educational content only: procedures and operating values vary between companies and sites. Always follow your company’s approved procedures, your supervisor’s instructions and the permits in force at your site.
Security and safety: what is the difference?
In the field we hear two similar words. Safety protects us from unintended accidents: a leak, a fall, a fire. Security protects us from deliberate acts: theft, sabotage, unauthorized entry or assault. An oil and gas facility is a sensitive target because it holds flammable materials, valuable equipment, operating data and many workers. That is why the security department works alongside HSE, and the two often share emergency plans.
Layers of protection
The core idea of facility security is layers of protection: never rely on a single barrier. Each layer does four things: deter, detect, delay and allow a response. In a typical field:
- Outer perimeter: the large fence around the complex, with clear signs, night lighting and a patrol road along it.
- Restricted zone: administration, maintenance, logistics and stores. Entry with a valid badge.
- Critical zone: the plant (CPF), control room, substation, and any explosives or hazardous material store. Behind an inner fence and a second gate, with access only for those who need it.
That is why real fields have an inner fence separating the plant from the administrative buildings, with the HSE and emergency response post near the dividing gate so emergency teams can reach the plant fast.
The gate: the most important point on the perimeter
The gate is where security meets every person and vehicle. What usually happens there:
- Identity check: a valid company or temporary badge, with the photo matched to the person.
- Reason for entry: a registered appointment, a work order or a permit.
- Visitors: registered, given a visible visitor badge, briefed on minimum safety rules, and escorted by a responsible person throughout.
- New contractors: not allowed into work areas before attending the site induction.
- Vehicles: vehicle and load searched according to site policy, dangerous goods documents checked, and vehicle safety equipment verified.
- Exit: sign-out, and checking that outgoing materials have a material gate pass.
The site gate has two vehicle search lanes, and one vehicle search takes about 6 minutes. Hourly gate capacity:
2 lanes × (60 ÷ 6) = 20 vehicles/h
If 120 vehicles arrive at shift start between 06:00 and 07:00, we need:
120 ÷ 20 = 6 h
So the last vehicle gets in near midday, and a long queue on the road becomes a security and traffic hazard in itself. Solutions: pre-registration of vehicles and loads, staggered arrival times, a fast lane for known crew buses, and a third lane at peak hour.
Controls inside the site
- Electronic access badges: allow entry by zone and time and record who entered and when. A lost badge is reported at once so it can be cancelled.
- Key control: keys to control rooms, substations and stores are issued and returned against a register. No copies without permission.
- Lighting and cameras: good lighting deters and makes detection easier; cameras help the security room verify an alarm before sending a team.
- Patrols: regular patrols along the fence road at irregular times, checking secondary gates and locks.
- Information: facility drawings, production schedules and security procedures are sensitive. Do not post photos of work areas on social media.
- Operational cyber security: control systems (DCS and SCADA) are part of security. Never plug a personal USB stick into a control room computer.
Every worker's role
Security is not the guards' job alone. Every worker in the field can notice:
- Someone without a badge, or with a badge that is not theirs, in a restricted zone.
- A vehicle parked somewhere unusual, or near a pipeline or well, for no reason.
- A cut fence, a broken door or a missing lock.
- Someone photographing the facility or asking many questions about guards and shifts.
The rule is simple: observe, report, and do not intervene yourself. Tell the security room or your supervisor at once, with the place, time and description. Acting alone can put you in danger.
Takeaway for the technician
Site security is built in layers: fence and gate, then a restricted zone, then a critical zone around the plant. The gate is the first checkpoint, and planning its capacity prevents queues and confusion. And every worker is an extra pair of eyes for security.
Test your understanding
Related lessons
- Security risk assessment (SRA) with API 780
- Desert journey management
- Permit to Work and Job Safety Analysis for a Slickline Job: A Practical HSE Guide for Engineers and Supervisors
Sources
- CISA / Interagency Security Committee - Facility Access Control: A Best Practice (2025)
- CISA - Risk-Based Performance Standards (RBPS)
- eCFR - 6 CFR 27.230 Risk-based performance standards (secure perimeter, access, screening)
- API Standard 780 - Security Risk Assessment Methodology for the Petroleum and Petrochemical Industries
A question about this article? Ask the library