Staff security training for your dealership: from $149 a year per location. The Safeguards Rule requires security awareness training for everyone who handles customer information. Our Dealer Edition is built for sales, F&I, the office and service, with a quiz, certificates and completion records for your files. $149 a year covers up to 10 staff at one location, and $349 covers up to 25. See the course and a sample →
Why dealerships are exposed
Dealerships collect exactly the information the rule was written to protect: Social Security numbers, income, bank details, credit reports and driver's licenses. It flows through your DMS, your F&I office, your CRM, your credit-application portals and a long list of vendors. Most dealerships pass 5,000 individuals quickly, so the full rule usually applies. That includes the written risk assessment, continuous monitoring or annual penetration testing, a written incident response plan and an annual report to the dealer principal or board.
Where dealers usually fall short
- No real QI. A name is on paper, but nobody owns the program.
- The IT provider is the QI. The same company runs the systems and checks its own work.
- Vendor oversight is missing. DMS, CRM, credit bureaus and marketing tools all touch customer data, and few dealers can show they've assessed them.
- MFA gaps. MFA is required for anyone accessing any information system, including the DMS and email.
- Nothing is written down. Controls may exist, but there's no risk assessment, test results or annual report to prove it.
What we do for dealerships
Serve as your QI
A written designation, with a senior manager at your dealership overseeing us, as the rule requires.
Risk assessment
Covers F&I, sales, service, your DMS and every system that touches customer data.
Vendor oversight
A vendor inventory, contract review and periodic assessments of your DMS, CRM and IT providers.
Testing
Vulnerability scans every six months and coordination of your annual pen test, with findings tracked until they're fixed.
Incident response
A written plan and a tabletop exercise, so everyone knows the 30-day FTC notification clock.
Annual report
A clear, written report to your dealer principal or board, as the rule requires.
Staff training
Security awareness training built for dealerships, with a quiz, certificates and completion records for your files. Included with Managed QI, first year included with Program Setup, or on its own from $149 a year per location. See the course →
Keep your IT provider
We don't replace your IT company. We give them a clear, prioritized list, then verify each fix and document it. Independent: we don't sell IT services.
Where does your dealership stand? Our 2-page checklist covers all 23 requirements in about 15 minutes. Get the checklist →
Dealer groups: we can run one program across all your rooftops, with location-level risk assessments and a single report to ownership. Talk to us →