If there no sufficient regulation regarding the information that may be transmitted and processed via the networks made available to users by vehicles (e.g. via WLAN or Bluetooth) and the protective safeguards that are to be taken, confidential information may be disclosed. Failure to adequately regulate how such networks are to be secured and used could expose sensitive information such as personal data.
If vehicles are stolen or integrated IT components fail and there are no corresponding rules or established procedures, this can have serious consequences. There is a risk that sensitive information may remain in the vehicle and be accessed by unauthorised third parties.
If vehicles or the IT components installed in them are not commissioned properly, this can lead to extensive information security threats. Relevant settings (such as the automatic synchronisation of phone directories) could be incorrectly configured, or functional tests on aircraft could be skipped or carried out improperly. This in turn could lead to the aircraft's systems not functioning as intended during use and, in the worst case, to a total loss of the aircraft.
In the same way, the functionality of integrated IT components or the entire corresponding vehicle can be jeopardised if the vehicle is improperly switched off or temporarily taken out of service. Emergency vehicles are an example of this. If such vehicles are switched off for a longer period of time, there is a risk that their batteries will become completely discharged due to their extensive equipment. As a result, a vehicle might no longer start and data could be lost in its integrated IT components.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)