Autonomous Mining-Fleet Cyber-Safety Adviser — Copper Mining

The mandate

The board’s standing question is whether a planned autonomous-haulage expansion can remain safe when dispatch data, positioning, vehicle software or remote OEM support is compromised or simply untrustworthy. Present assurance separates functional safety from cybersecurity and assumes isolation will stop a truck benignly. Mine leaders need evidence for mixed manual-autonomous traffic, communications loss and recovery after a malicious or ambiguous fleet-wide command.

The adviser contributes four days monthly, attends quarterly Santiago board sessions and joins the scheduled Antofagasta and Calama reviews. A monthly challenge forum examines one operational consequence with mine management, safety, autonomy engineering and workforce representatives. Urgent written advice is available within one business day for a material autonomy event, but the adviser does not join routine dispatch or provide continuous incident cover.

The appointment lasts eleven months and may renew once for one month if the final investment gate moves for regulatory or seasonal operating reasons. Renewal needs a committee minute stating the remaining decision and continued independence; unused days cannot be carried into implementation. The mandate ends after the board records its expansion conditions even if engineering execution and mine deployment continue.

Across mine and fleet functions, the adviser exercises no line authority and carries no executive responsibility for operational outcomes. Mine management owns production, the safety executive owns risk acceptance, engineering owns system configuration and dispatch retains operating decisions; none transfers here. The adviser may challenge safety claims, demand traceable evidence through the chair and recommend gate conditions, but cannot stop vehicles, change routes, approve software or instruct OEM personnel.

Conflicts include autonomy and vehicle OEMs, fleet-management platforms, positioning and communications providers, mining competitors, safety assessors, labour advisers and insurers. Employment, board positions, retainers, equity, funded research and expert appointments must be declared. A new engagement with a bidder or incumbent autonomy supplier during the term requires committee approval and may be incompatible with continued service.

Why the board wants this voice

Autonomous fleets concentrate operational decisions in software and remote relationships whose failure modes cross traditional safety and security boundaries. Vendor assurance can demonstrate designed behaviour but may not expose how a mine actually responds when telemetry is contradictory and production pressure is acute. Independent counsel helps directors connect expansion capital to tested degraded operation, bounded supplier authority and accountable recovery.

What you will own

• Challenge hazard analyses for malicious commands, corrupted positioning, dispatch compromise, stale maps, communications loss and unsafe recovery.
• Examine separation and interaction among autonomous trucks, manual vehicles, light equipment, maintenance personnel and emergency responders.
• Test OEM remote-access, software-release, diagnostic and emergency-support authority against mine-owned safety and change decisions.
• Frame investment gates using demonstrated degraded modes, independent stop layers, recovery evidence and acceptable production consequence.
• Review incident and near-miss learning for cyber precursors without forcing uncertain events into convenient attribution categories.
• Bring operator, maintainer and workforce evidence into board discussions otherwise dominated by vendor metrics and simulation results.
• Leave the committee a safety-security claim map, unresolved assumptions, supplier challenge log and reassessment triggers.

Candidate qualifications

• Advised boards or senior operators on autonomous mining, industrial robotics, mobile machinery or comparable cyber-physical safety.
• Can evidence a safety case materially changed after testing compromised data, remote support or ambiguous machine state.
• Understands functional safety, autonomy stacks, positioning, fleet dispatch, communications and operational recovery in active mines.
• Has challenged an OEM while preserving the technical cooperation needed for safe diagnosis and controlled software change.
• Worked directly with operators and maintainers around mixed traffic, isolation, emergency response and production constraints.
• Maintained independence amid concentrated equipment suppliers, assessors, insurers and mining investment interests.

Non-negotiables

• Will attend all Santiago, Antofagasta and Calama sessions under the mine’s safety and fitness requirements.
• Holds no undisclosed financial or professional tie to an autonomy bidder, incumbent OEM or appointed assessor.
• Accepts no authority to dispatch vehicles, approve software, accept safety risk or direct mine personnel.
• Brings live mobile-equipment consequence judgment beyond enterprise IT security or vendor product assurance.

1. 49 words maximum. Which autonomy failure most changed a cyber-safety investment or operating decision you advised?
2. 49 words maximum. How would you test degraded fleet control without placing people or equipment at unacceptable risk?
3. 49 words maximum. Which current OEM, mining or assessor relationship requires disclosure for this appointment?