Viva Energy Australia operates at the intersection of legacy petroleum infrastructure and an energy sector in transition. The company supplies approximately one quarter of Australia's fuel requirements through its Geelong Refinery, a network of more than 1,350 Shell-branded service stations, and an extensive national supply chain covering refining, importing, blending, and distribution. Led by CEO Scott Wyatt, the company is transforming its Geelong site into what it calls a modern Energy Hub while maintaining critical fuel supply operations that underpin significant portions of Australia's transportation and industrial sectors.
The technical surface area here spans petroleum refining operations, fuel logistics and distribution networks, retail point-of-sale systems across more than 1,350 locations, and industrial control systems tied to refinery operations. The company is simultaneously investing in renewable diesel, exploring hydrogen refuelling infrastructure, and developing gas terminal facilities - each expansion adding complexity to an already sprawling operational technology and information technology environment. For security practitioners, this means defending both traditional OT environments at the Geelong Refinery and a distributed retail network, while the company layers on emerging energy infrastructure projects.
Viva Energy positions safety as its highest priority alongside environmental stewardship and community engagement, framing its mission as "powering Australia responsibly." The threat model is straightforward: any disruption to refinery operations, supply chain logistics, or retail network availability directly impacts fuel availability for roughly 25% of the Australian market. The technical domains span industrial petroleum products, fuel blending operations, and increasingly, low-carbon fuel alternatives - all requiring distinct security approaches for operational continuity and data integrity across a geographically distributed national operation.
