Erik Nachbahr

The new FTC Safeguards Rule requires dealerships to implement and maintain an information security program that protects consumer data.  The new Safeguards Rule goes into effect in December 2022.  Dealerships are now scrambling to comply with these new regulations.  But why are they scrambling?  The FTC isn’t asking businesses to do anything extraordinary. The FTC … Read more

When it comes to cybersecurity you should first and foremost focus on protecting your business from a cyberattack.  Your focus should not be simply to comply with new regulations.  If you appropriately implement cybersecurity best practices, then you’ll optimize your dealership’s ability to fend off a cyberattack.  And – as a consequence of your effective … Read more

The key to mitigating – or eliminating – the impact of a cyberattack is to detect the attack in its infancy, swiftly stop it, and then quickly remove all malicious software from your network.  This cannot be accomplished in a reactive, passive manner.  With a passive approach, a cybercriminal will often penetrate your network undetected … Read more

Dealers are concerned about complying with the new FTC Safeguards Rule.  As they delve into what they need to do to comply there appears to be confusion about the option of either implementing continuous threat monitoring or conducting an annual penetration test along with vulnerability scanning twice per year. The FTC says that “absent continuous … Read more

The high velocity consolidation of the automotive retail space coupled with an explosion in cybercrime makes it increasingly important to be aware of the impact an acquisition can have on the capacity and effectiveness of your IT team.  Throw into the mix a slew of new consumer data privacy regulations like the FTC Safeguards Rule, … Read more

No one is perfect.  No business has the perfect cybersecurity set-up.  Everyone has ample room for improvement.  Improving your cyber defenses is an ongoing endeavor.  It never ends because the cybercriminal is constantly evolving, and cybersecurity best practices regularly adjust based on new technological advances and the altering tactics of the criminal. So, in this … Read more

There’s a lot that goes into implementing and maintaining an effective cyber defense.  But there is one key element that rises to the top from an effectiveness standpoint – continuous threat monitoring.  There is nothing that you can do to mitigate the impact of a cyberattack that is more effective than continuous threat monitoring. We … Read more