المنصّة · AL-MANASSA
Ministry of Oil · Republic of Iraq
Where this started
What can we propose to the Ministry of Oil?
A deliberately open question, and the only honest place to begin.
Why the question is hard
A hundred and sixty-one thousand people, before the companies
At this scale nothing is small. It has to survive twenty-five formations, not one.
161,585staffthe ministry's own establishment, 30 June 2025
25formationseach with its own systems, and its own paper
30,758in one companyBasra Oil alone, larger than most ministries
The scale of it
One ministry, three very different sizes
Basra Oil alone is fifty-five times the size of SOMO.
What this is
An argument about what to propose — and what not to
Theory and practice diverge here — we say so on the slide.
proposeand defendwhere the instrument is ours to build
describenot promisewhere it needs a law, or a contract reopened
declineand say sowhere software is simply the wrong tool
How we got here
Five things we had to study first
Two questions about the world outside, four disciplines that answer them, then the ministry.
The first two questions
Every plant has a process, and a support around it
How the world administers a large institution, and separately runs oil and energy technically.
Discipline one
ERP
One record for money, people, materials and work, not the institution agreeing with itself.
one recordnot one reportthe same row serves finance, stores and audit
the supportnot the processwhat keeps the plant running, not the plant
reconciliationis the symptoman institution reconciling itself has several ledgers
Discipline two
GIS
A map is a database with a shape, where distance and adjacency become askable.
whereas datanot a picture of a map — a table that has geometry
adjacencybecomes a querywhat sits within two kilometres of this leak
one geometrymany layersintegrity, security and planning read the same line
Discipline three
AI
A model states what it expects. Reality's disagreement is the finding, and it's scored.
expectationnot prophecya number the record can be measured against
scoredor retireda model nobody scores is an opinion with a budget
readsthe recordit answers from what is held, and cites the page
Discipline four
Cyber security
Nothing can be defended before it is listed. Inventory comes first, the boundary after.
inventorycomes firstevery device, its zone, and who can reach it
zonesthen conduitsthe boundary is drawn before anything is bought
observenever controlwe watch the process network; we never touch it
The fifth
And then the ministry itself
Four disciplines are how the world works. The fifth was how this ministry works.
The filter we applied
Only what technology can actually close
Every gap that follows passed that filter. The ones that failed are still named.
insoftware alonea record, a format, an instrument we can build
describednot promisedanything needing a law, or a contract reopened
outentirelypolicy, staffing, and what to do about any operator
The question
Can the ministry prove its own numbers?
Not produce them. Prove them.
August 2026
One month, three published figures
Different bases. All honest. None reconciled.
2.75million bpdproduction, as stated by the ministry
1.75million bpdexports, same statement
3.58million bpdimplied by the ministry's own monthly total
August 2026
The minister's own words, in print
Production and exports, stated together, on the record.
August 2026
The same month, counted a different way
111.06 million barrels in August, the ministry's own monthly total.
For comparison
The audited year behind both of them
1.23 billion barrels in 2023, with 98.7% of it through Basrah.
The institution
Twenty-five formations, one chain
Regulator, operator and marketer under one roof.
Before anything else
The ministry already knows
We bring instruments, not information.
Part one
23 gaps
Ordered worst first. Severity, then difficulty.
Systems and ERP
One national production figure, with its chain of custody
No single national figure carries its own arithmetic.
S5severitynational consequence
D2difficultyone format agreed inside
Months 1–3phasewhen it lands
Systems and ERP
Cost-recovery claims checked against what was approved
Claims are sampled, because checking every line is impossible.
S5severitynational consequence
D2difficultyone format agreed inside
Months 4–8phasewhen it lands
Security
An inventory of operational equipment, and who touched it last
No one inventory of operational equipment across sites.
S5severitynational consequence
D2difficultyone format agreed inside
Months 4–8phasewhen it lands
Systems and ERP
Evidence Iraq can bring to its own quota conversation
The quota argument is not backed by Iraq's own measurement.
S5severitynational consequence
D2difficultyone format agreed inside
Months 4–8phasewhen it lands
Systems and ERP
Which custody meters are proved, and when they were last proved
The code requires proving. Nothing records whether it happened.
S5severitynational consequence
D4difficultyfield instruments and consent
Months 4–8phasewhen it lands
Geospatial
Dated, located evidence of activity near shared structures
No dated record of activity near shared structures.
S4severityrecurring, and disputed
D1difficultywe build it
Months 9–12phasewhen it lands
Systems and ERP
An audit trail that survives the auditor arriving four years later
The auditor arrives four years after signature.
S4severityrecurring, and disputed
D1difficultywe build it
Months 4–8phasewhen it lands
Systems and ERP
A consolidated financial position across the ministry's companies
Consolidation is done by hand, every period.
S4severityrecurring, and disputed
D2difficultyone format agreed inside
Months 4–8phasewhen it lands
Systems and ERP
One reference that follows a cargo from lifting to receipt
No one reference follows a cargo end to end.
S4severityrecurring, and disputed
D2difficultyone format agreed inside
Months 1–3phasewhen it lands
Systems and ERP
A national record of what data exists and who holds it
Records exist. A national holding of them does not.
S4severityrecurring, and disputed
D2difficultyone format agreed inside
Months 4–8phasewhen it lands
Geospatial
Flare observation set beside the company's own return
Observation and declaration are reconciled once, by hand.
S4severityrecurring, and disputed
D2difficultyone format agreed inside
Months 1–3phasewhen it lands
Systems and ERP
What the ministry has committed to, in one register
Contract terms are read, not queried.
S4severityrecurring, and disputed
D2difficultyone format agreed inside
Months 4–8phasewhen it lands
Systems and ERP
Litres loaded against litres discharged
Litres loaded and litres discharged are never joined.
S4severityrecurring, and disputed
D3difficultya company sends on a schedule
Months 1–3phasewhen it lands
Security
The distance between the security level intended and the one achieved
Intended and achieved security levels are not compared.
S4severityrecurring, and disputed
D4difficultyfield instruments and consent
Months 9–12phasewhen it lands
Systems and ERP
Where a file has stopped, and for how long
A stopped file is invisible until someone asks.
S3severityweeks instead of a day
D1difficultywe build it
Months 1–3phasewhen it lands
Intelligence
The ministry's Arabic correspondence, made searchable
The archive is Arabic, paper, and unsearchable.
S3severityweeks instead of a day
D1difficultywe build it
Months 9–12phasewhen it lands
Geospatial
A response process for a satellite notification, with a clock on it
A satellite notice arrives. Nothing starts a clock.
S3severityweeks instead of a day
D1difficultywe build it
Months 1–3phasewhen it lands
Geospatial
An authoritative register of the physical estate
No single register holds the physical estate.
S3severityweeks instead of a day
D2difficultyone format agreed inside
Months 4–8phasewhen it lands
Security
Reporting an incident inside the published window
Reporting windows are published. The reporting path is not.
S3severityweeks instead of a day
D2difficultyone format agreed inside
Months 4–8phasewhen it lands
Systems and ERP
A public account of the sector's own numbers
Transparency reporting is an annual manual exercise.
S3severityweeks instead of a day
D2difficultyone format agreed inside
Months 9–12phasewhen it lands
Systems and ERP
What is being built, and what it will change
Project schedules sit apart from the numbers they move.
S3severityweeks instead of a day
D2difficultyone format agreed inside
Months 9–12phasewhen it lands
Systems and ERP
What the ministry sends to other bodies, and what comes back
Inter-agency exchange runs on people, not gateways.
S3severityweeks instead of a day
D3difficultya company sends on a schedule
Months 9–12phasewhen it lands
Intelligence
A register of what models are deployed, and what they are worth
Nothing records what a deployed model is worth.
S2severityone person can answer
D1difficultywe build it
Months 9–12phasewhen it lands
Part two
Seven records worth reading
Six are other people's. The seventh is ours.
On the record
Panorama
One group position, refreshed daily.
UAEwhereone national company
2017sincestill running
successoutcomethe destination
ADNOC
ADNOC's own announcement of it
Fourteen companies, one command centre, over a billion dollars.
On the record
Diskos
The state holds it. Companies use it.
Norwaywhereregulator-led
1995sincethirty-one years
successoutcomethe model
Norway
Norway's own record of the arrangement
The Diskos repository, industry and regulator together, since 1995.
On the record
The number that follows the barrel
Declared, lifted, received, paid — one identifier.
Nigeriawheresame problem
2023sincestill tightening
conditionaloutcomeone condition
On the record
The pipeline closed by not knowing
The pipe was never touched. The uncertainty was.
United Stateswherelargest fuel line
May 2021whensix days
failureoutcomethe warning
On the record
The software that waited two years
The last layer of protection was the target.
Saudi Arabiawherepetrochemical plant
2017whendormant since 2015
failureoutcomethe ceiling
On the record
Huachicoleo
The lesson was the sequence: measurement before enforcement.
Mexicowherestate pipelines
2018sincestill running
lessonoutcomethe order
On the record
The satellite that watched Zubair
More than thirty instruments, scanning continuously.
Iraqwherethis one is ours
2023sincenotices issued
openoutcomea letter closes it
Part two
Four places this has already been done
None of them is a vendor story.
Norway, since 1995
Ownership split three ways
Industry owns. Regulator administers. A third party operates.
Nigeria, 2023
They audited the meters first
One hundred and eighty-seven flow stations, before any display.
Nigeria
The contract notice itself
Metering awarded first: 187 flow stations, before any tracker.
United Kingdom, December 2025
A regulator that names operators
Twenty-two companies, each with its compliance percentage.
United Kingdom
The regulator's own published table
Twenty-two operators, each with a compliance percentage, named.
Iraq, 2023 onward
The flares are already watched
Thirty satellite instruments. Notices go somewhere.
Already watching
More than thirty instruments, already watching
Satellites notify governments directly the moment a flare is seen.
And one that does not transfer
Iraq is not a single national company
The neighbours upgraded. We have to federate.
Before the platform
What your neighbours actually run
Four national companies. One ministry. Different problems.
Aramcoone digital corethe largest such migration in this industry
ADNOCone command centrefourteen companies on a single display
Kuwaitthe map firstgeospatial treated as infrastructure
Saudi Arabia
Everything moved onto one digital core
Migrate, consolidate, then move to cloud.
one coreapproachcore systems onto a single digital core
fewer systemsthenscattered systems merged into it
selected appslastmoved to cloud, not everything
Saudi Arabia
Aramco's own record of the alliance
Its own newsroom, naming the S/4HANA migration directly.
Saudi Arabia
And a language model trained on their own archive
Trained on their own record, not bought ready-made.
250bnparametersas publicly reported
7 trilliontokenspublic and internal data
their archivetrained onnot bought ready-made
Saudi Arabia
The number, as trade press reported it
Two hundred fifty billion parameters, trained on a ninety-year archive.
Saudi Arabia
The largest incident in this industry hit the office network
Thirty thousand workstations. Not one valve.
~30,000workstationswiped in August 2012
~85%of office hardwaredestroyed
weeksrun by handbusiness restarted manually
Saudi Arabia
Aramco's own statement on it
Thirty thousand workstations, and production systems untouched.
United Arab Emirates
Fourteen companies on one display
Sixty-five operating sites. One screen.
14companiessubsidiaries and joint ventures
65siteson a single display
$1bn+value since 2018attributed to integration
Kuwait
The map was treated as infrastructure
An enabler of the programme, not a project beside it.
~$800mfive-year planannounced digital transformation
one portalspatial dataevery department, one platform
11sub-projectspredictive maintenance, exploration, production
Kuwait
A named engineer, on the record
Kuwait Oil Company's own team, quoted on what the map gives them.
Qatar
Already a party to the Basra gas plan
Not a distant reference. A partner here.
Ratawiin Basraassociated-gas processing facility
two weeksafter Aramcoa comparable attack in 2012
regionalthe threatchosen by sector and geography
Qatar
TotalEnergies' own project page
QatarEnergy named directly: twenty-five per cent of the Ratawi plan.
Iran
The target was the payment system, not the well
The point nearest the citizen.
2021rail networkwiper malware
2022steel plantfire and physical damage
Dec 2023~70%of fuel stations disabled
The neighbours
What transfers, and what does not
Their model assumes one company. Iraq has a ministry.
the ordertransfersmeasure, integrate, then automate
the attributiontransfersvalue came from integration, not tools
the structuredoes notone national company is not our shape
Part three
What the platform is
One display. Every figure carries its source.
The platform
The national position
Fields, pipelines, refineries, terminals, cargoes.
The platform
Four layers, and one deliberate absence
No path reaches a control system. By design.
The platform
One direction only, all the way through
Every submission is validated once. There is no path back.
The four
Four capabilities, one platform
Bought separately they never reconcile.
01systems and ERPthe ledger and the chain of custody
02geospatialwhere every asset actually is
03intelligencemodels with measured value, and a portfolio
04securitywhat exists, what it is exposed to
Pillar one
Systems and enterprise resource planning
Fourteen gaps sit here. It is the spine.
14gapsmore than the other three combined
D1–D2mostlyour build, or one format agreed inside
months 1–3startsbefore any hardware is touched
Systems and ERP
The systems inside it
Six, and they share one record.
01financial and accountingledger, consolidation, cost recovery
02human resourcesthe establishment, posts and grades
03procurement and suppliersrequisition through award, each stage timed
Systems and ERP
And three that carry the barrel
Where the ledger meets the hydrocarbon.
04assets and maintenancewhat is owned, and its condition
05fleet and distributiondepot to delivery, reconciled
06the executive assistantasks the record, cites the page
Systems and ERP
The custody chain, end to end
Seven measurements. Seven different precisions.
Systems and ERP
Everything funnels through one port
Basrah alone carries ninety-eight point seven percent of it.
Systems and ERP
The tolerances are the ministry's own
Set in its measurement code, 2007.
Systems and ERP
The ministry's own measurement code
Published in 2007, the standard every custody meter must meet.
Systems and ERP
Page nineteen, in the ministry's own words
Zero point two five percent at custody transfer, exactly as written.
Systems and ERP
Which meters are proved, and which are overdue
Proving every seven days. The code says so.
Systems and ERP
The last time anyone published the number
Thirty-four point five percent proved, as of 2010.
Systems and ERP
One number follows the cargo
Clearance, lading, manifest, receipt.
Systems and ERP
The group position
Twenty-five formations, one consolidated view.
Systems and ERP
Twenty-five formats today, one tomorrow
Every company keeps its system. Only the report changes shape.
Systems and ERP
Where each file has stopped
And which band of authority holds it.
Systems and ERP
The same correspondence, tracked and untracked
One version disappears for months. The other never does.
Systems and ERP
Procurement, from requisition to award
Every stage timed against its own standard.
Systems and ERP
The establishment, as it actually stands
Posts, grades, and where they sit.
Systems and ERP
The asset register, with condition
What is owned, where, and its state.
Systems and ERP
Services the ministry provides, catalogued
Each with an owner and a stated time.
Systems and ERP
Where the ministry meets other agencies
Each exchange named, owned and timed.
Systems and ERP
Every instrument, queryable
Baselines, fees, factors, ceilings.
Systems and ERP
What changed, when, and on whose authority
The trail, not the accusation.
Systems and ERP
Every tanker between depot and delivery
On the corridor, or off it.
Systems and ERP
The fleet itself
Vehicles, capacity, and what is available.
Systems and ERP
Litres loaded, litres discharged
With the tank level in between.
Systems and ERP
A national holding, with a specification
The ministry keeps the specification.
Systems and ERP
Who owns which dataset
Named, per formation, in one place.
Systems and ERP
What was submitted, and what was due
Against the schedule the code already sets.
Systems and ERP
Who may see what, and who did
Every view recorded, by role.
Systems and ERP
What we would need from the ministry
No new hardware. One agreement each.
returnsmonthlyin a format agreed once, inside the ministry
a named ownerper datasetthe question that kills data programmes
read accessto existing systemswe translate; nobody replaces anything
Systems and ERP
What we do not promise here
Stated now, so it is not discovered later.
no replacementof any company systemwe translate at the boundary
no metering hardwarein year onepart of that answer is not software
no judgementon any filewe make it visible; the decision stays yours
Pillar two
Geospatial
Where everything is, and what is above it.
4gapssmall in number, large in consequence
D2–D4mostlya format, or a company reporting
satellitealreadythe observations exist today
Geospatial
The systems inside it
Five. The map is infrastructure, not decoration.
01unified asset registerfields, wells, refineries, terminals
02pipeline integritylinear referencing, event tables
03environmental and flare observationsatellite reception and attribution
Geospatial
And two that touch the ground
Survey, and who is allowed where.
04field operations and surveyone national coordinate standard
05spatial licensing and permitscrossings, agreements, development plans
one datumbefore anythingtwo coordinate systems means two maps
Geospatial
The asset base, on the ground
Fields, stations, refineries, terminals.
Geospatial
The network, as it was actually laid
Every surveyed line in the country.
Geospatial
Integrity, by segment
Age, material, inspection, and what is overdue.
Geospatial
A notice becomes a case
With an owner and a window.
Geospatial
A published international framework
Five steps, with response windows, from the IEA and UNEP.
Geospatial
Four steps, and a clock on each
Today the clock does not start.
Geospatial
Observation against the stated path
Measured monthly, published quarterly.
Geospatial
Per operator, per month
Named, with the tolerance beside it.
Geospatial
What this pillar depends on
Two of the four are outside our reach.
a focal pointnamedso a satellite notice has a recipient
utilisation returnsmonthlyfrom operators, in one format
a decisionon publicationwhether a scorecard is published at all
Geospatial
What we do not promise here
Observation is not attribution.
no enforcementof any kindthe record is the lever, not the fine
no comparisonbetween countriesintensity figures do not transfer
no policyon flaring or importsthat is the ministry's decision, not ours
Pillar three
Intelligence
Models that carry their own evidence.
2gapsnarrow, and deliberately so
registerfirstbefore any model runs
boundedautonomynothing consequential decided by a model
Intelligence
The systems inside it
Six, and every one cites its source.
01forecastingagainst a recorded baseline
02anomaly and exception detectionthe case, not the score
03document intelligencethe Arabic archive, searchable
Intelligence
And three that read and advise
Reading is not deciding.
04the executive assistantanswers with the record it used
05computer vision on satellite imagerywhat changed, and when
06decision supportoptions with their uncertainty attached
Intelligence
Every model, with its measured value
Including the ones withdrawn.
Intelligence
Three roles, and only three
Read, suggest, and record. Never decide.
Intelligence
Ask it a question in either language
It answers with the record it used.
Intelligence
What we do not promise here
The narrowest pillar, deliberately.
no decisionthat is consequentialor contestable, or irreversible
no modelwithout a recorded baselinevalue is measured against something
no forecastsold as a factevery output carries its uncertainty
Pillar four
Security
Inventory first. Monitoring second. Control never.
3gapsall now reachable
Nov 2025changeda national centre now exists
D2highestno law needs changing
Security
The systems inside it
Six, in the order they must be built.
01asset inventory and visibilityyou cannot defend an unknown estate
02segmentation architecturezones and conduits, per facility
03monitoring and detectiononly after the first two
Security
And three about people and partners
Most incidents arrive through an account.
04incident responseon the national centre's clock
05identity and accesswho may reach what, and who did
06third-party and supplier riskthe shared surface with partners
Security
What equipment exists, and where
Vendor, support status, exposure.
Security
Zones and conduits, as the standard defines them
Intended separation, drawn.
Security
The layers, drawn the way the standard draws them
One conduit in. No path down to a controller.
Security
Intended against achieved
The gap between them is the finding.
Security
An incident, with the clock the centre requires
Critical immediate. High, four hours.
Security
Iraq's own National Cybersecurity Center
It publishes its own incident classification standard.
Security
The centre's own published clock
Critical, immediate. High, four hours. Both in writing.
Security
What we do not promise here
The hardest boundary in the proposal.
no pathto a control systemnot read, not write, not in year one
no safety systemtouchedTRITON is why, and it is not negotiable
ministry facilitiesonlyoperator sites are a separate conversation
The platform
And it works in Arabic
Right to left, throughout.
Part four
How hard each one actually is
Measured by what it depends on.
The scale
What it costs, against what it depends on
Every gap placed. Nothing hidden.
Worth saying out loud
Nothing here requires a law to be changed
Or a signed contract reopened.
On the record
The body that closes the one exception
Gazetted 10 November 2025, inside the Prime Minister's Office.
Boundaries
What we do not promise
No control systems. No production measured from orbit.
The other side of it
What the ministry would supply
Returns already produced, in one agreed format.
Already working
Where the ministry is succeeding
Southern gas capture at eighty-six per cent.
Already working
Where that gas actually goes
Eighty-six per cent captured. Fourteen per cent still burns.
On the record
The ministry's own announcement of it
Eighty-six per cent of associated gas, captured, not flared.
For context
An independent, annual count of every flaring country
The same report the industry itself is measured against.
For context
Where Iraq sits in that count
Third by volume, in the same report, in 2024.
Part five
The order matters more than the ambition
Three modules delivered beats ten started.
Part five
The same order, by discipline
Systems and ERP carries fourteen of the twenty-three gaps.
Months one to three
What could start immediately
No new sensor. No new law. Nobody's consent.
G01One national production figure, with its chain of custody
G05One reference that follows a cargo from lifting to receipt
G07Flare observation set beside the company's own return
G17Litres loaded against litres discharged
G02Where a file has stopped, and for how long
G20A response process for a satellite notification, with a clock on it
The honest limit
Part of the answer is not software
A metering baseline needs instruments and people.
Where every figure came from
That is the whole proposal.
المنصّة · AL-MANASSA
