This guideline provides best practice on how to apply the IEC 62443 standard to the oil and gas industry. Although the standard describes cyber security requirements for all industries, this guideline is tailored to oil and gas. While the standard focuses on what to do, this guideline focuses on how to do it.