The article reviews the security issues of cloud-based SCADA (Supervisory Control and Data Acquisition) systems that are widely used in monitoring and management of the oil and gas industry. Recently, extensive research has been conducted regarding the migration of SCADA systems to the cloud infrastructure. Transfer of applications used in the management and control of the SCADA system to cloud servers allows for efficient management of the system, solving resource problems and reducing costs. The article analyzes the advantages of cloud-based SCADA systems. Existing gaps have been identified that could obstruct the security of cloud-based SCADA systems. Security problems and risks in the use of cloud-based SCADA systems were analyzed and suggestions were made to help solve them to some extent.