What this covers
The FTC Safeguards Rule requires dealerships and other financial institutions to maintain a written information security program. We are not a law firm. We provide the IT infrastructure, security practices, and documentation that support that program.
What we actually do
- Access controls limiting who can reach customer financial data
- Encryption of sensitive data at rest and in transit
- Continuous monitoring and logging of access to F&I systems
- Multi-factor authentication on systems holding customer data
- Incident response planning and documented procedures
- Staff security awareness training
- Risk assessments and gap tracking to support your qualified individual
What we don't claim
We do not claim to provide your full written information security program on our own. That requires policy and designated personnel decisions your dealership makes. We provide and document the technology controls that support it.