Some practical tips to help dealership CEOs who are victims of cybercrime

Last month, dealer management systems (DMS) group CDK Global was hit by a cyberattack in the United States that forced it to shut down its cloud-based software for U.S. dealers.

Here, Andy Thompson, Offensive Cybersecurity Research Evangelist at CyberArk, offers dealership CEOs practical advice on how to stay safe and avoid falling victim to cybercrime in the future.

“To ensure the security and resilience of dealer groups against cybercrime, it is essential to adopt a comprehensive approach to identity security.

This approach applies to all industries, but it is particularly relevant for dealer groups because of their complex ecosystems of human, machine, and AI interactions. Here are some key strategies:

1. Establish multiple layers of cybersecurity controls. Protect all identities—human, machine, and AI—with strong authentication measures, such as multi-factor authentication (MFA), to add an extra layer of security.
2. It’s essential to implement regular training and awareness programs for all employees. Make sure your team knows how to recognize phishing attempts, social engineering tactics, and other common cyber threats.
3. Thoroughly evaluate the cybersecurity practices of your third-party vendors and supply chain partners. Ensure they adhere to strict security standards and have contingency plans in place to mitigate potential risks to your operations.
4. Regular audits and updates: Conduct regular security audits and keep all systems and software up to date with the latest patches. This helps close any vulnerabilities that could be exploited by cybercriminals.
5. Develop incident response plans: Prepare for potential cyber incidents by developing and regularly testing incident response plans. These plans should outline clear procedures for detecting, responding to, and recovering from cyberattacks.

By focusing on these areas, dealer group CEOs can create a robust cybersecurity posture that minimizes the risk of falling victim to cybercrime. This multifaceted approach ensures comprehensive protection and prepares organizations to effectively respond to any threats that may arise.

Andy Thompson is an Offensive Cybersecurity Research Evangelist at CyberArk