4 Min ReadOctober 18, 2023

Ten Vital Steps to Dealership Cybersecurity

Ten Vital Steps to Dealership Cybersecurity.

The risk of a cyberattack increases every year, but you can set up security measures and regularly review them to help protect your dealership now and in the future. Here are 10 key actions that’ll enhance cybersecurity:

1. Identify a Qualified Leader

Put someone in charge of your security posture to guide your dealership on a safe path, plus it’s also required by the Federal Trade Commission (FTC) Safeguards Rule for dealers. Additionally, this leader should:

• Restrict administrative access within the dealership (reset user passwords, make system changes, etc.)

• Create a written incident response plan, written risk assessment and written reports to senior management of board members

• Complete periodic assessments on the dealership online stability and if there’s anything that should be changed

2. Update Your Software and Secure Your Files

Ensure updates include your apps — Dealer Management System (DMS), Customer Relationship Management system (CRM), etc., — web browsers, and operating systems in addition to your software. Back up important files in the cloud, on an external hard drive or offline. Make sure paper files are also securely stored.

3. Require Strong Passwords

Passwords should be used on all laptops, tablets and smartphones. A strong password should have at least 12 characters that include a combination of numbers, symbols, capital and lowercase letters, and punctuation. Never reuse passwords or share these over the phone, in texts or via email. Limit the number of failed login attempts to prevent password guessing attacks.

4. Encrypt Data

Encrypt any data that’s sensitive or personal information. Laptops, tablets, smartphones, removable drives and cloud storage solutions could have sensitive data, which should be encrypted at the source.

5. Use Multifactor Authentication (MFA)

Require MFA to gain access to sensitive areas of your network. This will cause added steps beyond simply entering a password, such as a temporary code on a smartphone or a key inserted into a computer. MFA is important because it’s also required per the FTC Safeguards Rule.

6. Secure Routers, Endpoints and Remote Connectivity

Once your router is configured, change the default name and password, disable remote management, and log out as the administrator. Make sure the router supports WPA2 or WPA3 encryption and that it’s turned on.

Encryption secures data sent over your network so that outsiders can’t read it. Include security provisions in your vendor contracts, especially if the vendor will be connecting to your network remotely. Ensure that your vendors follow the FTC Safeguards Rule to protect any personally identifiable information.

Endpoints (laptops, desktops, tablet, etc.) can serve as entry points for cybercriminals to your network, so endpoint security should be one of the first places dealerships look to secure your network. Perform system monitoring or penetration tests to determine whether your infrastructure is vulnerable.

7. Provide Security Awareness Training

Create a culture of security by implementing regular and mandatory employee training. Inform employees as you find out about new risks and vulnerabilities. If employees don’t attend training, consider blocking their access to the network. This is an inexpensive way to help defend against cyberattacks such as phishing. CDK Global offers one of the best security awareness training programs.

8. Assess Vendor Security Measures

Your vendors and service providers must also comply with the FTC Safeguards Rule. Periodically assess these partners to ensure they maintain adequate safeguards to protect customer data. Require all contracts to include a clause that covers proper security standards.

9. Have a Plan

The FTC Safeguards Rule also mandates that you create a solid plan so be ready to report on your dealership’s security activity and posture. There are many resources out there to help, such as the National Institute of Standards and Technology (NIST) Planning Tools and Workbooks. This section includes guides, online tools, cyber insurance, and workbooks to evaluate your dealership’s current approach to cybersecurity and plan for improvements.

The NIST Cybersecurity Framework section includes a widely used approach to find and address the highest priority risks to your business, including standards, guidelines and best practices. You can also reach out to CDK to help identify any gaps.

10. Get Answers

If all of this leaves you with questions, consider hiring a managed service provider or managed service security provider to supplement your team or fully manage your security posture. These vendors can help assess or evaluate your infrastructure as well as help develop and manage an appropriate action plan for your dealership moving forward.

Always Be Aware

This list highlights fundamental components critical to the makeup of your security posture, but your work isn’t finished. The cyberthreats against your business are ever evolving, and your security efforts must evolve to keep your dealership safe. Be prepared to monitor, prevent, and defend future and ongoing cyber threats as a part of doing business in this digital age.

Share This

Brenda Lynch
By Brenda Lynch
Brenda Lynch

Brenda Lynch is a senior product marketer for Collaboration products at CDK Global. Brenda has over 14 years of experience in product, product marketing, sales and product strategy. Brenda is responsible for sharing how CDK Collaboration products can help dealers stay connected to their customers.

Recent Insights

Time to Roll Out Summer Sales and Service Campaigns.

Time to Roll Out Summer Sales and Service Campaigns

Whether you consider summer starting on Memorial Day, the last day of school, or the official start on June 20,...
4 Min ReadJun 13CDK Global
CDK Unveils Inaugural Dealership Workplace Study

CDK Unveils Inaugural Dealership Workplace Study

The automotive retail industry is known for long-held stereotypes about its workers and roles. To say it’s a misunderstood industry...
2 Min ReadJun 11CDK Global
Turn Service Customers Into Sales With C R M Equity Mining.

Turn Service Customers Into Sales With CRM Equity Mining

In the competitive world of automotive sales, dealerships are constantly looking for ways to increase their profits and maintain customer...
2 Min ReadJun 10Amber Good
How Dealership Service Departments Can Enhance the Customer Experience.

How Dealership Service Departments Can Enhance the Customer Experience

The spotlight is shining on delivering great customer experiences. In fact, 84% of dealers plan to increase their focus on...
4 Min ReadJun 6Don Zogg
 Car Buyers Visit More Dealerships in May

Car Buyers Visit More Dealerships in May

May was the second month in a row where 87% of car buyers CDK’s Research Team surveyed said buying their...
2 Min ReadJun 3David Thomas
Are E Vs Ready for the Summer Road trip?

Are EVs Ready for the Summer Road Trip?

The all-American pastime of the summer road trip is alive and well. The Transportation Department reported travel rose to over...
4 Min ReadMay 20CDK Global
Dealers Not Confident in O E M E CDK recently released the Dealers Face the EV Transition white paper, which details the pessimism many dealers feel about the electric future. A clear majority (65%) indeed admit to being pessimistic about EVs, and the paper delves into many of the reasons behind that number including the impact to the dealership’s revenue, consumer interest and more.   We also asked dealers about their confidence level in the EV strategy of their respective OEMs. Whether they hV Strategies.

Dealers Aren't Confident in OEM EV Strategies

CDK recently released the Dealers Face the EV Transition white paper, which details the pessimism many dealers feel about the...
2 Min ReadMay 13David Thomas
Bring Modern Convenience to the Showroom Floor.

Bring Modern Convenience to the Showroom Floor

In our technology-driven world, we’ve taken modern convenience to a whole-new level. Consumers expect to order what they need online...
3 Min ReadMay 9Steven Walker
What Dealers Say About the EV Transition

What Dealers Say About the EV Transition

As the electric vehicle revolution propels forward, dealers across the country are coming to terms with learning, selling and servicing...
1 Min ReadMay 6CDK Global
Three Dealership Accounting Woes and Fixes.

Three Dealership Accounting Woes and Fixes

Nothing can steer your auto dealership off course faster than poor accounting practices. And it’s not just about the importance...
4 Min ReadMay 6CDK Global