In an effort to answer most of the applicable questions posed within the Federal Bureau of Investigation’s Private Industry Notification on Electronic Logging Devices, released 7/21/2020, GPS Insight has compiled the following Q&A article. Any questions not answered here can always be forwarded to GPS Insight’s Support team for review and response.
For more information, see: Electronic Logging Devices Cybersecurity and Best Practices
Q&A
- Is the communication between the engine and the ELD enforced?
Yes. GPS Insight requires all ELD hardware and software configurations to query the necessary ECU data (ignition status, odometer, etc.) before, after, and during vehicle active status. - Were technical standards or best practices followed in the device’s development?
Yes. For all hardware, full testing is completed by the manufacturer prior to shipping to GPS Insight, then additional phased testing is conducted both before and after software application to ensure full and complete functionality. - Does the component protect the confidentiality and integrity of communications?
Yes. All data is protected and gated through user login/password functionality. - Has the component had penetration tests performed on it?
Yes. GPS Insight regularly conducts tests to ensure all data is secure. Additionally, GPS Insight recently received its 2020 SOC 2 Type 2 attestation, confirming through an audit process that all data is fully protected in the interests of your organization. Lastly, GPS Insight also recently received its first-ever Data Protection Impact Analysis (DPIA) attestation, certifying that we meet the compliance requirements of both the General Data Protection Regulation (GDPR) and California Consumer Protection Act (CCPA). - Does the device have secure boot?
Yes. GPS Insight’s ELD Connect solution guarantees all device boots use only the software trusted and installed by the OEM.
For users using GPS Insight’s ELD Mobile solution, this will be dependent on the phone/tablet provided by the user. - Does the device ship with debug mode enabled?
USB debugging is enabled by default in order to help facilitate faster troubleshooting or device help if/when required. This feature can be disabled upon request.