Following a cyber attack in 2012, Saudi Aramco disconnected from their business and production operations and began scrambling to get things operational again since they did not have a proper IT security team in place to handle such incidents.