Why Do Car Dealers Need Cybersecurity Services? 

**Executive Summary:** The FTC Safeguards Rule now applies to U.S. auto dealerships holding 5,000+ potential customer records, requiring a written information security program with nine core elements (designate a qualified individual, conduct a written risk assessment, implement mitigating controls such as MFA, perform penetration testing, enforce third-party vendor security, maintain an incident response plan, and report annually to leadership); BHIS offers resources and assistance to help dealerships meet these compliance requirements.