Nine Requirements of the FTC Safeguards Rule

**Executive summary:** This guidance outlines the FTC Safeguards Rule's nine requirements for auto dealerships—designating a qualified security individual; performing periodic risk assessments; implementing customer information safeguards (MFA, encryption, IAM); continuous monitoring and testing; staff training; vendor risk management; keeping security programs current; a written incident response plan; and reporting to leadership—while explaining the industry's exposure to data breaches and ransomware, potential fines for noncompliance, and how Arctic Wolf's managed security services can help dealerships achieve and maintain compliance.