The cyber security and business continuity planning in the oil and natural gas industry in US are discussed. In a 2003 survey of computer crime in the US, 67% of responding organizations reported one or more security incidents while 16% of the responding organizations reported between 11 and 30 incidents. A cyber-security and business continuity program covers a wide range of areas that must be assessed and evaluated to protect the business. It is recommended that system vulnerabilities should be addressed as soon as they are discovered.