Reply to thread

First and Foremost Dealers have no say in what CDK does about their Cyber Security or anything else for that matter except through purchasing decisions. Dealers have to make sure that they are protected and need to have processes and programs in place to protect them against any loss due to an uncontrollable breach from a third party IE CDK and this third party could be any one of the many platforms that Dealers employ. Dealers need to be implementing a phishing campaign which will be more prevalent now after the breach, run vulnerability scans, follow up on the information provided by the scan not just assume that the scan is enough we must remediate, and conduct regular physical audits so that the trail sets the dealer up for an "Affirmative Defense" should anything happen. We just need to be as prepared as possible because this will not be the last one of these.