‘Significant gaps’ in cybersecurity controls of major roadways: BC AG

By

VICTORIA (NEWS 1130) – It’s something commuters might be thinking about as they drive through local tunnels and bridges. How vulnerable are they to cyber hackers? That’s the focus of the latest report from Auditor General Carol Bellringer.

She says she’s not aware of any breaches already impacting traffic flow or safety. “Overall, we found that the ministry hasn’t established appropriate cybersecurity controls. There were significant gaps.”

So, that begs the question: should drivers be worried?

“They need not be concerned. There’s always a risk in cybersecurity controls in any system. No more worry here than anywhere else with any other IT system.”

Bellringer adds Ministry of Transportation staff are already addressing problems she’s identified about heavy traffic zones including the Lions Gate Bridge, as well as the George Massey and Cassiar Tunnels.

“We’re not aware of any cybersecurity breaches that have impacted traffic flow or safety, but we want to emphasize the importance of protecting these systems.”

She adds she can’t release any specifics because that might further compromise technology systems.

“These controls include basic things like knowing what software and devices are on a system, so that you can secure them. It also includes controlling and monitoring who has access. They have other controls in place that we did not assess, so it isn’t the only control that keeps the traffic flow safe.”

Bellringer admits it’s still possible for somebody to hack into the system and change traffic lights.

“That would be the kind of thing, certainly, one has to design the traffic system to avoid. Having your basic controls in place is the start of what you have to look into. There are reversible roadway lanes in the tunnels and on the Lions Gate Bridge. Could somebody hack into the system if there are weaknesses? Yes they could. These are a set of basic controls every IT system should look to have. We were surprised that they weren’t in place when we did this audit and we will say the improvements were made very quickly after we pointed it out to them.”

 

A similar review is being done to identify possible security breaches at BC Hydro.

Top Stories

Top Stories

Most Watched Today