Incident responseDraft · publishing soon
The FTC's 30-day breach notice: what auto lenders need ready
The notification clock starts at discovery. Here is the readiness work that has to happen before the first alert.
Insights
Practical guidance on security, regulation and response.
Short, specific articles for executives and IT leaders in auto finance, dealerships, financial services and growing companies.
Featured · RegulationDraft · publishing soon
Who should be your dealership's Qualified Individual?
What the FTC Safeguards Rule asks of the role, when an outside provider makes sense, and what ownership must still do itself.
LeadershipDraft · publishing soon
What a vCISO costs in 2026, and what you should get
How retainers are priced, what belongs in scope, and the questions to ask before you sign.
RegulationDraft · publishing soon
California's CCPA cybersecurity audits: a planning timeline
Which businesses are covered, when first certifications are due, and how to start without overbuilding.
PlaybooksDraft · publishing soon
Five controls that stop wire fraud in the F&I office
Business email compromise targets payoff and funding workflows. These controls close the most common gaps.
CloudDraft · publishing soon
A Microsoft 365 security baseline for a 50-person company
The identity, email and device settings that deliver the most protection for the least disruption.
LeadershipDraft · publishing soon
Reading a cyber insurance questionnaire before you sign it
Questionnaire answers can become warranties. How to answer accurately and use the form as a roadmap.
Free resource
Safeguards Rule Readiness Checklist
A one-page checklist of the program elements dealerships and auto lenders are expected to have in place, with space to note owners and dates.
Request the checklist
We send it by email along with an offer of a free 20-minute readiness call.
Request the checklist