Cyber Risks in the Trucking Sector: A Growing Concern

Evolving technology has significantly benefited organizations across industries, and the trucking sector is no exception. Communications and transport logistics can now be integrated through single database systems, improving operational automation and efficiency.

However, such connected operations can also leave trucking organizations vulnerable to cyberthreats. With critical tools and data sources in one place, cybercriminals can disrupt an organization’s supply chain in a single attack. For instance, if threat actors breach an organization’s dispatching software, driver communications could become inoperable, shutting down operations and causing bottlenecks. Worse still, threat actors may be able to take total control of a fleet’s dispatch system to reroute high-value cargo to different locations for nefarious gains.

The trucking industry was the eighth most targeted for cyberattacks in 2023, according to technology company IBM. To protect themselves from growing cyberthreats now and in the future, organizations should consider the following tips:

• Be mindful when selecting vendors. Organizations should carefully choose third-party software or services, ensuring they read reviews, obtain references and ask vendors to confirm their cybersecurity practices.
• Implement a cyber incident response plan. Organizations should produce a detailed guide of instructions, procedures and protocols to help them respond to and recover from cybersecurity incidents. This plan should include up-to-date contact information for drivers and an alternative means of recording movements (e.g., paper logbooks) should electronic means become inoperable.
• Separate critical vehicle functionality. Organizations should consider separating pivotal vehicle functionality systems (e.g., the controller area network bus) from internet-connected components. Organizations should also leverage penetration testing to evaluate the likelihood of cybercriminals affecting the functionality of fleet vehicles.
• Provide robust cybersecurity training. Employers should provide regular staff cybersecurity training that focuses on the importance of strong passwords, multifactor authentication and spotting suspicious emails. To reinforce training, IT departments could send fake phishing emails to employees to test their responses.

Alongside risk mitigation measures, cyber insurance can significantly reduce the likelihood of losses in the event of a breach.