Draft an Incident Response Plan
What do you do in the aftermath of a “security event?" The answer to that question must be set forth in a written Incident Response Plan.
- 1 min
Implement Policies and Procedures for Personnel to Implement your ISP
The greatest threat to customer data security is located between the monitor and the chair – in other words, your own employees.
- 1 min
Mandatory Safeguards: Encryption, MFA, and Continuous Monitoring
In this article we discuss 3 more mandatory safeguards under the revised Rule: Encryption, MFA, and Continuous Monitoring.
- 1 min
The Price of Compliance Is Going Up. Sorry.
When this article was written the Safeguards Rule was still in the review process for the final revision that went into effect in 2022.
- 1 min
Mandatory Safeguards: Risk Assessment and System Inventory
Once a QI has been designated, that person’s first task should be to conduct a Risk Assessment. A Risk Assessment is an evaluation of the in
- 1 min
Why Comply? 3 Reasons Dealers Should Comply with the Revised FTC Safeguards Rule
Why Comply? 3 Reasons Dealers should comply with the Revised FTC Safeguards Rule
- 2 min
Information Leaks: Safeguards At Your Dealership
We've seen many high-profile data breaches in the last decade. Dealers may think they aren't targets for these kinds of data breaches,...
- 3 min
Spear-Phishing: Defending Your Dealership from Targeted Phishing Attacks
All phishing attacks can potentially expose your dealership to malware that corrupts its computer network, or mines the data in its DMS...
- 3 min
Goin’ Phishing: Defending Your Dealership from Phishing Attacks
Phishing attacks are a kind of social engineering – convincing people to behave in a particular way. And social engineering is by far...
- 3 min
The Dealerbuilt Data Breach: What you need to know
What the FTC said in their consent order against Dealerbuilt could have an impact on how dealers, other financial institutions, and their se
- 5 min
Why Dealerships Should Obey the Safeguards Rule
Does your dealership have Safeguards in place to protect customer information? Or does your dealership just say that it protects customer...