'Proportionate response' needed over fleet cyber security concerns, says AFP

Following recent media reports on the potential of vehicles to be hacked and used for spying and espionage, Paul Hollick, AFP chair, said there were undoubtedly issues that needed to be addressed, but they probably affected only a relatively small number of fleets.
EVs and models from China have been highlighted as areas of special concern for hacking in mainstream media.
Hollick responded: “Can vehicles equipped with multiple cameras, microphones, lidar and their own internet access potentially be used to gather information in a hostile manner? The answer to that is yes. However, we have no knowledge of this ever having happened and this is a subject where it is easy to stray into sensationalism.”
Hollick added that precautions taken by AFP members who work in government, in critical infrastructure, in defence and in the military seemed sensible. For example, some have adopted guidance about where cars can be parked in relation to sensitive facilities they are visiting.
“These are sectors with a heightened awareness of cyber security and which have good reasons to be very careful. They will also tend to have rules governing when and where personal mobile phones can be used, and the risk presented by the latest cars is not dissimilar,” he elaborated.
But the dangers for most fleets are very limited and the need to take action is probably unnecessary, Hollick went on.
“Our feeling is that fleets should deal with this in a proportionate manner. If you are working in an industry where security is perceived as a less critical issue and are serving a similar customer base, then the possibilities of a problem arising are almost certainly slight.
“The concentration on EVs is probably unfair. Because they are new and tend to be among the most advanced vehicles on the road, electric cars and vans will be better equipped with the kinds of cameras and microphones that present risk, but there is no practical experience to suggest that they bring a higher level of jeopardy.”
Hollick added that several AFP members had extensive experience of vehicle cyber security and were happy to share their best practice ideas.
“Among our membership, we have fleets operating into almost every sector of UK government and industry, and many of them have been considering this issue for several years. They are a valuable source of advice and help and crucially, can offer support on both assessing risk and the appropriate precautions to take.”
Natalie has worked as a fleet journalist for over 20 years, previously as assistant editor on the former Company Car magazine before joining Fleet World in 2006. Prior to this, she worked on a range of B2B titles, including Insurance Age and Insurance Day.
Natalie edits all the Fleet World websites and newsletters, and loves to hear about any latest industry news.