Fleet Maintenance - 42

and Analysis Organizations (ISAOs) to ease the
process of staying up-to-date.
"ISACs share analysis of cyber threat information within their respective sectors, with other
sectors, and with the government. Depending
upon the sector, they may provide other cybersecurity services as well," explain officials at the
U.S. Department of Justice.
ISACs exist for what are considered the 16 "critical infrastructures" of the U.S., but because not
every industry falls within these 16 sectors, organizations have created ISAOs. ISAOs are intended
to provide the same benefits and information as
ISACs for specific industries or markets.
The vehicle industry has its own ISAC where
intelligence is shared on developing cybersecurity
risks to the vehicle and vehicle cybersecurity capabilities are improved across the industry. For more
information, fleets can visit automotiveisac.com.

human error, a technological glitch, or some
combination of the three? From there, fleets should
be able to ascertain what action needs to be taken.

During
While in the midst of a data breach, the U.S.
Department of Justice recommends the following
steps to handle the situation: make an initial assessment, implement measures to minimize continuing
damage, record and collect information, and notify.

3. Record and collect information

1. Make an initial assessment

Assess the situation and first determine the cause
of the incident. Was the incident a malicious act,

2. Implement measures to minimize damage

After a data breach a fleet should do whatever
is possible to minimize the corruption to their
vehicle's systems.
Robert Vogt, chairman of IOSiX, a manufacturer
of ELD hardware and high-end automotive data
acquisition systems, recommends a few preventive
measures which can also help to avoid further
damages from a cybersecurity incident.
"[Fleets should] be extremely careful about
vetting any devices they add to the vehicle," Vogt
says. He suggests disabling any wireless communication features or functions that are not being
used by the fleet, including Wi-Fi, Bluetooth, and/
or an OEM telematics system. "If you're not using
it, it's using you," he adds.

In the event of a cybersecurity incident, fleets
should keep logs, notes, records, and any data
possible that may help in analyzing and investigating the breach.
The U.S. Department of Justice recommends these
forms of information be recorded and retained:
ÜÜA description of all incident-related events,
including dates and times.
ÜÜInformation about incident-related phone calls,

emails, and other contacts.
ÜÜThe identities of people working on tasks related
to the intrusion, including a description of each
individual's role or responsibilities, the amount
of time spent on the tasks, and the approximate
hourly rate for each person's work.
ÜÜDetails on the systems, accounts, services, data,
and networks affected by the incident and a
description of how these network components
were affected.
ÜÜInformation relating to the amount and type of
damage inflicted by the incident, which can be
important in civil actions by the organization
and in criminal prosecutions.
ÜÜInformation regarding network topology or the
arrangement of a network comprised of nodes
and connecting lines through the sender and
the receiver.
ÜÜThe type and version of software being run on
all affected systems.
ÜÜAny irregularities in the organization's network
architecture, such as proprietary hardware
or software.
Having these records on hand will also benefit
fleets in the event they are needed as evidence or
for rebutting claims in potential legal proceedings
stating that evidence has been tampered with.
4. Notify

Lastly, when handling a cybersecurity incident,
the proper authorities must be notified of the

?
s
b
o
J
h
g
Toe HuAVE THE RIGHT Tools!
W

KTI81798A

1" Drive Impact Wrench
with 6" Extension Anvil

1600

* 3 forward and 3 reverse power settings
* D Side handle for ease of use
* Side exhaust

ft-lbs torque

KTI74394

Industrial Power Bank and Jump
Starter Kit with 30,000 mAh

* Intelligent cables feature built-in
overcharge and reverse polarity protection
* 2 USB charging ports, as well as 19V,
16V, & 12V outputs and an OBDII memory
saver cable

WARNING: Cancer and Reproductive Harm - www.P65Warnings.ca.gov

1800

PEAK AMPS

800

cranking
AMPS

LIFT RANGE

9.06"-17.94"

KTI63194

22 Ton Air Hydraulic Truck Jack

* Narrow width fits between tandem wheels
* Load-limiting and bypass valves
* Spring activated self retracting ram

VehicleServicePros.com/10095015

See more of our great products at www.ktoolinternational.com

http://www.automotiveisac.com http://www.ktoolinternational.com http://www.P65Warnings.ca.gov http://www.VehicleServicePros.com/10095015

Fleet Maintenance

Table of Contents for the Digital Edition of Fleet Maintenance