Cybercrime: TLN helps increase digital resilience

Awareness and knowledge about digital security are important for the logistics sector. After all, the number of cyber attacks is growing, with fairly recent hacking attacks affecting the port of Antwerp and a malfunction that shut down air traffic at Eindhoven Airport for some time. It shows how vulnerable our digital systems are. For many companies, the question is no longer whether they will be hit by an attack, but when. Transport en Logistiek Nederland (TLN) helps its members with this issue by means of webinars and the platform Samen Digitaal Veilig (SDV). 

"A recent report by ABN AMRO states that half of the companies have already been victims of some form of this crime," says Cees Pille, cluster manager of logistics at TLN. In doing so, he warns, "Don't think: I have it in order. That may have been the case five years ago, but of course it is a race and the techniques of cybercriminals are becoming increasingly complex and effective."

Risks

The European Union Cybersecurity Agency annually examines how cybersecurity is evolving. The "Enisa Threat Landscape 2024" report shows that ransomware and DDoS attacks are the biggest threats. Both cripple business systems, but the former involves ransom demands. The techniques used are becoming increasingly complex as well as AI tools. These aspects make cyber attacks more effective, but also more accessible to attackers who have less technical knowledge. In addition, social engineering, such as phishing, is still common.

Protection chain partners

"The logistics sector is very vulnerable because this is a supply chain. If one little wheel fails, everyone within the chain suffers. Moreover, digital resilience is not only important to protect one's own organization, the stolen data also gives unauthorized parties interesting information. For example, about the loads of clients. For example, the hackers can find out exactly what is stored in warehouses, when it is transported and to whom. Everyone understands that this is undesirable. For this reason, clients increasingly expect you to have your digital security in order. Even if you are a small company and the NIS2 directive does not apply directly to you. What's more, you may be working with organizations that, according to the new Cyber Security Act, the Dutch implementation of the NIS2 Directive, will soon have to impose requirements on their supply chain partners."

Knowledge

Pille points out the importance of bringing knowledge into the organization: "Staff is also a vulnerable link. Think of employees leaving USB sticks with important information lying around, opening a phishing email, looking at confidential data on their laptops on the train or logging on to a public WiFi network. Such phishing emails used to be much more recognizable because of dozens of spelling mistakes and a logo that didn't match. Now they are harder to distinguish from genuine emails."

Pille gives a good example of a good test case that companies can carry out: "Internally, we circulated a fictitious phishing email. It provides insight into the level of awareness and knowledge among staff, which you can then act on as an organization. It is important to break through the shame. And there is of course a task for the organization to ensure that some things are simply no longer possible, such as logging in via an external WiFi network or always using the same password."

Support

Together with other industry organizations, TLN is a partner of the platform SDV. This online platform helps SMEs improve digital security in an accessible way. People can register here free of charge and make use of all kinds of tools, including a checklist that provides insight into your current status. But also consider employee training, taking out cyber insurance, support with the NIS2 guideline and obtaining the NIS2 Quality Mark.