Driver Security Guidance

The Transported Asset Protection Association (TAPA) recently published a Driver Security Guide. While the guide is geared towards the Europe, Middle East, and Africa (EMEA) regions, it includes guidance that is applicable to all regions to improve security and safety for drivers, as well as protect against cargo theft and fulfill aspects of the Minimum Security Criteria (MSC) of the US Customs-Trade Partnership Against Terrorism (CTPAT).

Key information provided in the document is the description of the types of criminal activity that drivers are at risk of experiencing. These include:

• Intrusion Robbery, and Theft: When criminals manage to enter the cargo compartment and steal cargo, or criminals manage to steal the whole truck or trailer.
• Deception: When criminals try to gain access to the cargo using deceptive means – rather than force – to trick brokers, carriers, shippers, and drivers to hand over a load to them instead of a legitimate business.
  • This can involve impersonating legitimate shippers, brokers, police or other authorities, or drivers.
  • It can also involve intercepting or blocking communication between the driver, dispatching/monitoring center, or authorities.
• Hijacking: When criminals force the truck or other vehicle to stop and steal the cargo.
• Illegal Immigrants Entry: When unauthorized individuals attempt to hide in road freight vehicles to enter countries.
  • In some cases, this may be facilitated by criminal networks involved in migrant smuggling.
• Last-mile Vehicle Crime: When criminals target vehicles typically used for last-mile delivery (such as minivans or smaller boxed trucks) in urban areas.
• Cybercrime and Information Security Leak: For Driver Security purposes, the focus here is the unintentional leak of information from drivers via their social media or email accounts.

How can CTPAT Members use this information?

CTPAT MSC are not prescriptive, meaning each member’s policies and procedures should address security requirements as best fits their company and operations. Guidance such as this provided by TAPA can therefore be useful in identifying best practices that may be incorporated into your company’s policies.

For example, in this case we recommend that you:

1. 5-Step Risk Assessment: Ensure your 5-Step Risk Assessment evaluates the risk of the criminal activities listed above within your supply chains. CTPAT Members should be aware of the trends in tactics utilized by criminals in the countries and regions within their supply chains.
2. Cybersecurity: Make sure your cybersecurity protocols are enforced throughout your company, including by drivers.
3. Training: As CTPAT Members, you should be providing security training specific to roles and responsibilities, such as training drivers on 7/17-point inspections. Check your training to make sure the information on types of criminal activities, prevention tactics, and incident response protocols are covered in your training as applicable.  

Prevention tactics provided by TAPA EMEA

• Intrusion Robbery, and Theft: Driver’s should…
  • Stick to planned routes. Avoid unscheduled stops and changes to routes.
  • Not arrive too early at the destination facility to avoid waiting outside.
  • Use secure parking areas when taking breaks during route.
• Deception: Drivers should….
  • Be are aware of the threat of impersonation.
  • Verify information such as with dispatching center if there’s a change in location of delivery facility; or if they are stopped and suspicious of those that stopped them, calling police to confirm the legitimacy of the stop.
• Hijacking: Drivers should…
  • Avoid stopping the vehicle for individuals who do not appear to be legitimate authorities.
  • Be aware of emerging threats & stay vigilant while driving.
• Illegal Immigrants Entry: Drivers should…
  • Perform vehicle checks before and after every stop.
• Last-mile Vehicle Crime: Drivers should…
  • Have vehicles equipped with fit-for-purpose security systems (auto-lock, RFID bands, etc.)
• Cybercrime and Information Security Leak: Companies should…
  • Have strong cybersecurity defense measures in place.
  • Ensure training & awareness of cyberthreats among drivers, such as phishing attacks.
  • Protect shipping info and documents.
  • Keep sensitive information on a need-to-know basis.