The Photo That Told Them Exactly Where the Load Was
It was a good photo. Late afternoon light, the rig parked up at a roadhouse, the whole unit looking sharp after a wash. He posted it that evening with a short caption about the run he was on and how far he still had to go.
The geotag was on. The trailer number was legible. The caption named the freight and the destination. His profile listed his employer. An earlier post from a fortnight before showed the depot gate.
None of that is a hack. Nobody broke into anything. But between one photo and a scroll back through the account, a stranger now knew what was being carried, roughly where it was, who it belonged to, when it would arrive, and what the yard it came from looks like.
Cyber security in transport does not usually start with someone in a hoodie writing code. It starts with ordinary people doing ordinary things on their phones, without anyone having explained what those things give away.
Transport runs on people who do not think of themselves as computer users
Ask a driver whether they work in IT and they will laugh. Then look at the day.
They log into a dispatch app. They capture proof of delivery on a handheld. They receive job details by text and message the allocator back. They use a fuel card with a PIN. They photograph damage and email it in. Depot staff run a warehouse system, process customer paperwork, and handle contact details and addresses for hundreds of consignees. Someone in the office pays invoices.
Every one of those is a point where a person makes a decision that either protects the business or opens it. And almost none of the people making those decisions have ever had it explained to them in terms that relate to their job.
That is the gap this course is built to close. Its aim is to reduce human cyber risk — to give people practical ways to work safely online, so they can understand, identify and avoid the threats that would otherwise cause harm to the organisation and everyone connected to it.
The problem is getting bigger, quickly
According to Australian Bureau of Statistics data, more than two in ten Australian businesses — 22 per cent — experienced a cyber security attack during the 2021–22 financial year. Two years earlier, in 2019–20, the figure was closer to one in ten, at 8 per cent.
That is not a gradual drift. It is a near tripling in two years, and transport businesses are not sitting outside it. Freight operators hold customer addresses, delivery schedules, payment details, driver records and cargo information. All of it has value to someone.
Defence in depth, and why the small things matter
Cyber security professionals talk about defence in depth: rather than relying on one strong wall, you add layers of controls, so that a failure in one place does not hand over everything.
The layers people find least interesting are the ones that do the most work. Updating antivirus software. Using a secure, unique password rather than the same one everywhere. Keeping software up to date. Locking your screen when you walk away from the computer.
These feel like small and constant interruptions, and people get fatigued by them. That fatigue is exactly what an attacker relies on.
The LastPass breach is the clearest illustration of it. A company whose entire business is password security was compromised through an employee’s home computer running software that had not been updated in more than three years. One person, one skipped update, one machine that was not even at work.
What the course covers
Cyber Security Awareness is divided into four parts.
1. Password management and authentication
Why the same password across a dispatch app, an email account and a personal login is one breach away from being three breaches. What makes a password strong in practice rather than in theory, how password managers work, and why authentication matters when a login can be used from anywhere.
2. Social engineering
The threat that has nothing to do with technology and everything to do with people. The caller who sounds like the allocator and needs a delivery address confirmed. The text saying your fuel card has been suspended, click here. The email from a supplier whose bank details have apparently changed. The visitor at the depot gate who is expected, obviously, and just needs someone to hold the door. This part covers what social engineering is and how to protect yourself against it.
3. Managing your digital footprint: secure social media
The photo at the top of this article. What your accounts reveal about your employer, your movements, your routines and your workplace. How to use social media securely without having to abandon it.
4. Data protection
The information you handle that belongs to other people — customer addresses, consignee contacts, manifests, driver records — and what protecting it actually requires. This section also covers keeping your devices safe.
Learning outcomes
At the end of this course you will be able to:
- Understand the purpose of cyber security training.
- Use passwords effectively to protect your data.
- Define what social engineering is and how to protect yourself.
- Use social media securely.
- Keep your devices safe.
- Identify and report cyber security incidents and suspected compromises of systems and their resources.
That final outcome is the one operators tend to undervalue. Most breaches are survivable if someone speaks up early. They become expensive when the person who clicked the link decides not to mention it, and the intruder has three weeks inside the system before anyone notices.
Why this belongs in a transport training program
Cyber security sits alongside the physical hazards in a modern transport operation rather than apart from them. It protects business and customer data, intellectual property, reputation, costs and, ultimately, the longevity of the business.
At $29 it is the least expensive course in the KRTS awareness suite, and one of the quickest to roll out across a whole workforce — drivers, depot staff, allocators, schedulers and office teams alike. Human cyber risk is not confined to the people with a desk.
Technical requirements — read before enrolling
A working webcam is mandatory.
- You must have a webcam on a PC, laptop or tablet, or a smartphone with a front-facing camera. Without one you cannot complete the course.
- The webcam must remain on for the duration of the course. Do not turn it off, cover it or block the view while logged in.
- The system photographs whoever is answering questions, to confirm the person enrolled is the person being assessed.
- If the camera is blocked, covered or switched off and there is no vision for those images, the modules and assessments are void and will be reset for you to complete again.
- The camera also allows you to answer video-based questions. Use the device somewhere the privacy of others can be maintained.
Browser: Google Chrome or Microsoft Edge only.
Safari, Internet Explorer and Firefox are known to cause problems with the video assessments and will stop you completing the course. If you are studying at work, check that company firewalls will not block course access or the submission of video assessments — your training or IT department can confirm this.
KRTS: transport training since 1990
KRTS is a nationally accredited training organisation specialising in heavy vehicle transport, RTO Code 90252. Our awareness courses sit alongside our fatigue management and work diary training as part of a complete picture of the risks a transport operation actually carries.
Close the gap between your people and your data
Cyber Security Awareness. $29. Online and self-paced. Statement of Completion issued on successful completion.
Enrol: https://courses.krtstraining.com.au/sign-up/signup/loadsignup?data=89e82464c98822f89d6f876fa846e43c5e3d4a1af09f1fb4d2d5ead21958d53a7f17a513d0fbc7572ee76b11fc84768f
Questions? Call KRTS on 02 6924 4046 or visit www.krtstraining.com.au
