If the recent wave of cyberattacks impacting the automotive retail industry has you feeling a bit on edge don’t worry—you’re not alone.  The concern many dealers are feeling is leaving them asking “do I have everything that’s needed to protect my dealership?”  In this blog, we’ll talk about some of the defenses that all dealerships should have in place now to keep your dealership’s reputation, data, and bank account safe from the cybercriminals.

Why Bother?

If you’re thinking it’s inevitable that you’ll get hacked – and it’s just a waste of time and money to bother doing anything about it – think again. Implementing the strategies discussed in this blog will tilt the odds of avoiding a cybersecurity catastrophe in your favor.

Anyone – regardless of the cyber defenses they have in place – can be hacked.  But the cybercriminal is smart.  They will always go down the path of least resistance.  Do you want to be the house in the neighborhood that leaves its door open or are you the one who locks the door, has an alarm system, and has installed cameras outside your house?  Both houses can be robbed.  But one is more likely to be robbed than the other.

Here are the essentials that every dealership should have in place NOW.

Update That Old Tech

Most dealerships have some old technology hanging around. It’s time for an upgrade. Think of outdated tech as an open invitation to cybercriminals. Modernizing your systems is crucial—not just for cool new features but to seal off those vulnerable entry points.

Oh, don’t forget support for Windows 10 ends on October 14, 2025.  This means it will no longer be supported by Microsoft.  For many dealerships, moving to Windows 11 will require new PCs.  Make this move now.

Strict Admin Access Control

When it comes to administrative user access, less is more. Only give out what’s absolutely necessary. It’s like not giving everyone in the office a master key to the building. This way, even if someone’s credentials are compromised, the damage is limited.  Most dealerships are very lax when it comes to administrative user access.  This is a big mistake.

Train Your People Well

Your team can be your greatest asset in the fight against cyber threats. Regular, effective cybersecurity training turns them into a human firewall – capable of spotting phishing attempts and other sneaky attacks. Think of it as having a security expert at every desk.  Implementing a cybersecurity training solution is just part of the mix.  To ensure that it works it must be properly administered and managed.

Ongoing System Management

Regularly assess your system configurations.  This is essential keeping things secure.

Have a Solid Disaster Recovery Plan

A well-thought-out disaster recovery plan ensures your dealership can bounce back quickly from any cyberattack. Here’s what you need to carefully consider:

• Business Continuity: Keep things running smoothly, no matter what.
• Data Protection: Backups and encryption are your best friends here.
• Minimize Losses: Have strategies in place to reduce data loss.
• Clear Communication: Everyone should know the drill and who to contact.
• Restore and Improve: Quick data recovery and continuous updates to your plan.

Design a Strong Network

Your network should be like a fortress. The strategic use of segmentation and other defenses to contain any breaches and protect critical areas is essential.

Hunt for Intrusions

Don’t wait for the alarm to go off—actively look for signs of trouble. Continuous intrusion hunting helps you spot threats before they become big problems. The secret is to sniff out indicators of suspicious behavior. This requires a combination of the right technology and experienced professionals who know what to look for.

Implement MFA the Right Way

How you implement MFA matters. It impacts employee productivity and keeps out criminals. Correct implementation of MFA leverages a federated identity management approach to ensure secure and seamless access across all your systems.

Think Holistically

A solid cybersecurity program involves people, processes, and technology all working in concert. Train your team, establish robust protocols, and leverage advanced tech to create a comprehensive defense strategy.

By embracing these strategies, you’re doing more than taking self-assessments, checking some boxes on a checklist, or simply reacting to threats—you’re gearing up to stay a step ahead of the cybercriminal.  These defenses will improve your dealership’s chances of avoiding cybersecurity catastrophe. Remember, cybersecurity is an ongoing journey of vigilance and adaptation. It is a process that constantly evolves.