One of the additions to the new Safeguards Rule is the addition of a CISO or Chief Information Security Officer to the requirements for companies that handle customer personal information. This could be one of the biggest expenses faces many small to medium-size businesses, not just car dealerships.