Auto Dealer CyberSecure
Starter Kit$149
Professional$249
Auto dealer cybersecurity
FTC Safeguards Rule WISP and policies for auto dealers
A Written Information Security Program mapped to the FTC Safeguards Rule, an identity theft Red Flags program, payoff and funding verification and a playbook for the day your DMS goes dark.
- Editable Word & Excel
- Instant download
- One-time purchase
Why it matters
What the FTC Safeguards Rule requires of dealers
Dealerships that arrange financing or leasing are financial institutions under the FTC Safeguards Rule. The rule requires a written information security program, a Qualified Individual, a written risk assessment, multi-factor authentication, encryption, staff training and service provider oversight.
It also requires annual penetration testing and vulnerability scans at least every six months (or continuous monitoring), a written report to the board or owner at least once a year, and notice to the FTC within 30 days of discovering a breach involving 500 or more customers.
The Professional Edition adds an identity theft Red Flags program, a privacy notice and a ransomware and DMS outage playbook.
What's inside
Every file in each edition
Policy numbers carry over from the Starter Kit to the Professional Edition, so you can start small and upgrade without renumbering.
Starter Kit
$14924 editable files
Policies 15
- AD-CYB-001Information Security Program & Qualified Individual Policy
- AD-CYB-002Risk Assessment & Customer Information Inventory Policy
- AD-CYB-003Access Control & Least Privilege Policy
- AD-CYB-004Multi-Factor Authentication Password Policy
- AD-CYB-005Encryption & Secure Information Exchange Policy
- AD-CYB-006Acceptable Use & Workstation Security Policy
- AD-CYB-007Email Security, Phishing & Impersonation Policy
- AD-CYB-008Personnel Security & Confidentiality Policy
- AD-CYB-009Security Awareness & Training Policy
- AD-CYB-010Physical Security & Clean Desk Policy
- AD-CYB-011Backup, Recovery & Business Continuity Policy
- AD-CYB-012Records Retention & Secure Disposal Policy
- AD-CYB-013Service Provider Oversight Policy
- AD-CYB-014Incident Response & Notification Policy
- AD-CYB-015Remote Work & Mobile Device Policy
Plans, guides & assessments 8
- WordImplementation Guide
- WordStaff Cybersecurity Quick Guide
- WordIncident Response Plan
- WordWritten Information Security Program (WISP)
- WordCustomer Information & Payment Security Notice
- Word30-60-90 Day Action Plan
- Word50-Point Cybersecurity Checklist
- WordCybersecurity Maturity Assessment
Workbook 1
- ExcelAuto Dealer CyberSecure Toolkit
Professional Edition
$24942 editable files
Policies 21
- AD-CYB-001Information Security Program & Qualified Individual Policy
- AD-CYB-002Risk Assessment & Customer Information Inventory Policy
- AD-CYB-003Access Control & Least Privilege Policy
- AD-CYB-004Multi-Factor Authentication Password Policy
- AD-CYB-005Encryption & Secure Information Exchange Policy
- AD-CYB-006Acceptable Use & Workstation Security Policy
- AD-CYB-007Email Security, Phishing & Impersonation Policy
- AD-CYB-008Personnel Security & Confidentiality Policy
- AD-CYB-009Security Awareness & Training Policy
- AD-CYB-010Physical Security & Clean Desk Policy
- AD-CYB-011Backup, Recovery & Business Continuity Policy
- AD-CYB-012Records Retention & Secure Disposal Policy
- AD-CYB-013Service Provider Oversight Policy
- AD-CYB-014Incident Response & Notification Policy
- AD-CYB-015Remote Work & Mobile Device Policy
- AD-CYB-016Identity Theft Red Flags Program Policy
- AD-CYB-017Funding, Payoff & Payment Change Verification Policy
- AD-CYB-018Vulnerability Management & Security Testing Policy
- AD-CYB-019Generative AI, OEM & Third-Party Data Connections Policy
- AD-CYB-020Privacy Notice & Information Sharing Policy
- AD-CYB-021AI Governance Policy
Plans, guides & assessments 10
- WordProfessional Edition Implementation Guide
- WordIncident Response Plan & Playbooks
- WordTabletop Exercise Kit
- Word30-60-90 Day Action Plan
- WordStaff Cybersecurity Quick Guide
- WordWritten Information Security Program (WISP)
- WordCustomer Information & Payment Security Notice
- Word50-Point Cybersecurity Checklist
- WordCybersecurity Maturity Assessment
- Word50-Question Auto Dealer Cybersecurity Self-Assessment
Forms & templates 10
- FORM-01Payoff, Funding & Payment Change Verification Form
- FORM-02Access Request Form
- FORM-03Staff Offboarding Checklist
- FORM-04Software, SaaS & AI Tool Request Form
- FORM-05Security Exception Request
- FORM-06Incident Intake Form
- FORM-07Service Provider Security Questionnaire
- FORM-08Confidentiality Policy Acknowledgment Form
- FORM-09Breach Notification Worksheet
- FORM-10Qualified Individual Annual Report
Workbook 1
- ExcelAuto Dealer CyberSecure Professional Toolkit
Free download
Free Auto Dealer cybersecurity self-assessment
Answer 50 yes / no / not sure questions across 10 areas. Score your results and get clear next steps for your industry.
- Small Business, Law Office, Real Estate, Healthcare, Accounting & Tax, Insurance Agency, Financial Advisor, Auto Dealer, Mortgage & Title, and Cyber Insurance Readiness editions
- Starred priority questions and a scoring table
- Printable PDF
Your assessment is ready
Thanks. Your download should start automatically. If it doesn't, use the button below.
Download the PDFQuestions about your results? Email info@cybriva.ai.
Questions
Auto Dealer kit FAQ
Does the Safeguards Rule apply to my dealership?
If you arrange financing or leasing for customers, it almost certainly does. Confirm with your counsel or compliance advisor.
Is there a Qualified Individual annual report?
Yes. The Professional Edition includes a Qualified Individual annual report and management review form.
What format are the files in?
Editable Microsoft Word policies, plans and forms plus an Excel workbook. You download everything right after checkout and customize it for your organization.
Can I start with the Starter Kit and upgrade later?
Yes. The Professional Edition keeps every Starter Kit policy under the same ID number, so nothing you have already customized gets renumbered.
Is this legal advice or a certification?
No. Cybriva provides templates and education. It is not legal advice, an audit, a certification or a guarantee of compliance or security. Have your attorney review documents that carry legal obligations.