A method and apparatus for determining tampering at a device coupled to a moveable object includes receiving a plurality of orientation states of the device, the plurality of orientation states measured by an orientation sensor, determining, based on the received orientation states, at least two expected orientation states, receiving a further orientation state of the device measured by the orientation sensor, in response to determining that the further orientation state differs from the at least two expected orientation states, generating a tamper alert.