Practical writing on cybersecurity, compliance, and IT operations for California businesses. No vendor pitches, no scare tactics, just what we tell our own clients.
Auto dealerships are financial institutions under the Gramm-Leach-Bliley Act, and the FTC Safeguards Rule has been fully enforceable since June 9, 2023. Here is what the rule requires, where dealerships most often fall short, and what non-compliance actually costs once you add up consent orders, CCPA statutory damages, insurance rescission, and downtime.
Read moreCyber insurance applications have grown longer because of specific claim trends from 2023 and 2024, including the MOVEit supply-chain breach, the Change Healthcare ransomware incident, and the Arup deepfake wire fraud. Each new section asks about specific security controls including immutable backups, layered MFA, callback verification on wires, EDR or MDR coverage, vendor risk, and tested incident response. Answers that overstate your security posture can trigger rescission after a claim, meaning the policy is treated as if it never existed.
Read more