Who else can log into your dealership?
A checklist for vendor remote access, MFA, and what the FTC Safeguards Rule expects from a dealership that arranges financing. About ten minutes, no form to fill in.
By continuing, you agree to our cookie policy.
See all 16 questions
Vendor remote access
- Do you have a list of every vendor that can connect to your DMS, CRM or network remotely?
- Do you know how each of those vendors connects?
- Is vendor remote access turned off when it isn't being used?
- Have you asked each vendor how they protect their access to your systems?
Logins and MFA
- Is multi-factor authentication on for email?
- Is multi-factor authentication on for your DMS, CRM and F&I systems?
- Does everyone have their own login?
- Is access removed the same day someone leaves?
The FTC Safeguards Rule
- Is one named person responsible for your information security program?
- Do you have a written information security program and risk assessment?
- Is customer information encrypted, both stored and in transit?
- Do you run an annual penetration test and vulnerability scans every six months?
- Does the owner or board get a written security report at least once a year?
- Do you know your FTC breach notification deadline?
If your systems go down
- Do you have a written plan for selling and servicing cars if your DMS is unavailable?
- Do you know who you'd call in the first hour of an attack?