Proactive Cybersecurity Actions Dealerships Can Take Now

proactive cybersecurity

It’s no longer sufficient to merely react to attacks as they occur. Instead, proactive cybersecurity actions are essential to fortify your defenses and mitigate risks effectively. By taking preemptive steps to strengthen your security posture, you can better safeguard your data, systems, and reputation from malicious actors. Here are some proactive cybersecurity actions you should … Read more

Dealerships Must Reduce Their Attack Surface

dealerships must reduce attack surface

Understanding and managing the attack surface is crucial for protecting dealership networks and sensitive data. The attack surface represents all potential points, known as attack vectors, that hackers can exploit to gain unauthorized access or execute cyberattacks. Common attack vectors within dealerships include: Network Perimeter – The boundary between an organization’s internal network and the … Read more

What’s Your Dealership’s Approach To IT? Here Are Some Things to Consider.

break fix

Today, dealerships rely on their technology environment to sell and service cars and trucks.  Dealership technology is mission critical to a dealership’s success.  Yet many dealerships are still employing outdated IT strategies that can jeopardize their business as technology quickly advances and cybersecurity threats evolve. An increasingly crucial decision that dealerships must make is whether … Read more

Automotive News Interviews Erik Nachbahr About Dealership Cybersecurity Challenges in 2024

Automotive News Article

Dealership cybersecurity challenges in 2024 Published January 3, 2024 Heighten liability risks for dealerships leave them vulnerable to legal action if any cybersecurity prevention falls short of the new FTC requirements. Dealerships are also watching their cyber insurance coverage costs soar at the same time insurers are scaling back protections as they try to rein … Read more

Creating A Human Firewall: Protecting Data

Human Firewall

To effectively protect your dealership from the cybercriminal, every employee must play a role.  One of the most effective tactics within a comprehensive information security program is to fortify your defenses by creating a human firewall.   The development of a human firewall is accomplished through an effective employee cybersecurity awareness training program.  Such a program … Read more

Employee Cybersecurity Awareness Training – What Dealerships Need To Know

cybersecurity training

To mitigate the risk of a successful, cyberattack, dealerships must address the most common sources of an attack—unpatched security vulnerabilities, human error, and malware. In this blog, we’re going to focus on the human error component. According to the Verizon 2023 Data Breach Investigation Report, nearly three-quarters of data breaches involve the actions of individuals … Read more

An Eye-Opening Discovery: The True Intent of The FTC Safeguards Rule

eye opening

The FTC Safeguards Rule mandates that dealerships must “develop, implement, and maintain a comprehensive information security program.” The Rule illustrates the FTC’s commitment to compelling businesses to establish an effective cyber defense to protect consumer information. However, many dealerships are simply concentrating their compliance efforts on isolated measures that alone fall short of constituting a … Read more

The Worthless Vulnerability Scan

worthless design

The Federal Trade Commission (FTC) mandates that dealerships – like any other business – have a “comprehensive information security program” in place to protect sensitive customer data.  In this blog, we’ll delve into the critical aspects of vulnerability management, highlighting why a vulnerability scan – while valuable – is just the starting point and by … Read more

A Self-Assessment Cautionary Tale

self-assessment

Many dealerships have been falsely led to believe that FTC compliance can be satisfied with checklists and self-assessments completed by those with limited – if any – technical cybersecurity training and expertise.  This is not the case and the consequences of this approach to cybersecurity, FTC compliance, and in securing cyber liability insurance can be … Read more