News & blogs

On the road, not off the hook: how to raise security awareness among mobile workers

12 May

Cyber threats don’t stop at the office door

Cybercriminals aren’t just targeting desktop computers anymore. These days, everyone carries a mini computer in their pocket: the smartphone. It’s an essential communication tool for staff, but it also makes them a target. And cybercriminals know exactly how to exploit that.

But cybersecurity goes beyond phones. Think of onboard computers, ERP systems and digital tachographs. These are all devices that are constantly sending and receiving data. It might seem harmless that someone knows where a truck is and when it’ll arrive. But in the wrong hands, that data can be used to hijack a shipment or launch a targeted attack.

A realistic threat

Picture this: a driver stops at a petrol station and logs in to the free Wi-Fi. Without him or her even realising, they connected themselves to a fake hotspot. An “evil twin” network that looks legitimate but intercepts all data traffic. The moment they log in to the transport management system or check their email, hackers gain access to their login details. That information can later be used to infiltrate the company’s network, manipulate delivery routes, or steal sensitive data.

And that’s just one scenario. There are countless other risks mobile workers may face. Social engineering (where criminals manipulate people into helping them) plays a huge role in attacks. Think voice phishing, pretexting or man-in-the-middle attacks. Cybersecurity is no longer something that only concerns office workers. So how do you ensure mobile employees understand the risks and actively contribute to a safer working environment?

4 proven strategies that work:

1. Phishing simulations

Phishing simulations are a hands-on way to raise awareness and keep people alert. Employees receive realistic fake phishing messages on their phones or computer, mimicking the tricks criminals use.

Why do they work?

• Realistic experience, no real risk
• Instant feedback with measurable results • Every simulation is a learning opportunity
• Builds awareness and reduces the likelihood of clicking on real phishing links

2. Start at onboarding

Security awareness should begin on day one. By including it in your onboarding programme, you lay a solid foundation. Make sure new hires understand the risks they may encounter on the road and know how to respond in suspicious situations.

Key onboarding topics:

• Using strong, unique passwords
• Never leaving devices unattended
• Safe browsing practices
• Spotting phishing emails and dodgy phone calls

3. Make reporting easy

Drivers, warehouse staff, dockworkers and loaders aren’t sitting in an office where they can just pop over to IT. That’s why it’s important to create accessible ways to report suspicious activity.

Examples include:

• A dedicated WhatsApp number for reporting
• A hotline to the IT department
• A report button in the onboard computer or transport app

4. Make it mandatory

Best practice shows that awareness is most effective when it’s made mandatory, just like a driving licence or a safety certificate. Without the basics, you shouldn’t be on the job.

Benefits:

• Fosters a safety-first work culture
• Interactive training improves engagement and retention
• Reduces the risk of costly mistakes or cyber incidents

Security awareness isn’t a burden, it’s a necessity. Especially in sectors where mobility is key, your people are your first line of defence. The key is to make learning easy, relevant and accessible, no matter where your employees are.