Auto Dealerships

IT Support and Cybersecurity for Inland Empire Auto Dealerships

Your sales floor, F&I office, service drive and parts counter all depend on the same network. Integrity Tech helps dealerships in and around the Ontario Auto Center keep their systems up, protect customer data and work through the security rules that apply to them.

Integrity Tech technician working at a computer workstation
IT support technicians working at multi-monitor workstations

Customer Data Moves Through Every Department

Credit applications, driver's licenses, Social Security numbers and payment cards pass through a dealership every day. If your dealership arranges financing for customers or leases vehicles for more than 90 days, the FTC treats it as a financial institution under the Gramm-Leach-Bliley Act, and the FTC Safeguards Rule (16 CFR Part 314) applies.

The Safeguards Rule requires a written information security program, a qualified individual to oversee it, a risk assessment, access controls, encryption, multi-factor authentication, staff training and oversight of service providers. Since May 13, 2024, covered businesses must also notify the FTC within 30 days of discovering unauthorized acquisition of unencrypted information about 500 or more consumers.

If you take card payments in sales, service or parts, the PCI Data Security Standard applies to how you store, process and transmit cardholder data. California's breach notice law (Civil Code 1798.82) adds its own requirement to notify affected residents within 30 calendar days of discovering a breach.

What We Handle for Your Dealership

FTC Safeguards Rule and WISP help

We help you write and maintain your written information security program, run the risk assessment and put the required technical controls in place.

MFA and access control

Multi-factor authentication on email, DMS access and remote tools, with role-based access for sales, F&I, service and accounting.

PCI DSS support

Network segmentation for payment devices, patching and the documentation that helps with your annual PCI self-assessment.

DMS and CRM workstation support

Help with the PCs, printers, networks and integrations behind your dealer management and CRM systems, working with your vendors on application issues.

Ransomware protection and monitoring

Endpoint protection, email filtering and after-hours security monitoring across sales, service and office devices.

Backups and offsite replication

Veeam backups with offsite replication and test restores, so a server failure doesn't shut down the service drive.

Showroom and service drive networks

Guest Wi-Fi kept separate from business systems, plus reliable Wi-Fi for tablets, check-in kiosks and shop equipment.

How We Work With Dealerships

1

Dealership IT review

An on-site walk-through of your network, F&I workstations, payment devices, backups and security.
2

Safeguards and risk report

A plain-language list of gaps against the FTC Safeguards Rule and PCI DSS, with priorities and costs.
3

Onboarding

We document accounts, vendors and devices, and set up monitoring, MFA and backups.
4

Ongoing support

Help desk calls answered by our Rancho Cucamonga team, with after-hours security monitoring.
5

Quarterly check-in

Backup tests, patch status and updates to your information security program.

Local Help Near the Ontario Auto Center

Ontario Auto Center, off Interstate 15 between the 10 and the 60, is home to 15 automotive brands, according to its website. Our office at 9439 Archibald Ave in Rancho Cucamonga is a short drive away, so we can be on-site when a problem can't be fixed remotely.

Nearby cities we serve: Ontario, Rancho Cucamonga, Fontana, Upland, Chino, Corona, Riverside, Pomona, Eastvale.

Dealership IT: Common Questions

Does the FTC Safeguards Rule apply to our dealership?

It applies if your dealership is a financial institution under the rule. That includes dealers that arrange or extend financing for customers and dealers that lease vehicles on a nonoperating basis for more than 90 days. A dealer that only sells for cash or outside financing may not be covered. Ask your attorney if you're unsure, and we'll help with the security side either way.

What is a WISP?

A written information security program describes how your dealership protects customer information: who is responsible, the risks you've identified, the safeguards in place and how you test and update them. The Safeguards Rule requires one for covered businesses.

Do we need to report a breach to the FTC?

Under the Safeguards Rule, covered businesses must notify the FTC as soon as possible, and no later than 30 days after discovery, when unencrypted information about 500 or more consumers is acquired without authorization. California's breach notice law has its own 30-day deadline for notifying affected residents.

Can you help with PCI DSS?

Yes. We help segment payment devices from the rest of your network, keep systems patched and gather the documentation for your annual self-assessment questionnaire. Your payment processor sets which questionnaire you complete.

Do you work with our DMS provider?

Yes. We support the computers, networks and printers your DMS runs on and coordinate with your DMS provider's support team on application issues.

Ready to Transform
Your IT Infrastructure?

Set up a free strategy call today and see the difference Integrity can make for your business.