# Automotive Risk Management Partners, Inc. (ARMP) > An all-in-one compliance and cyber security program for US automotive and RV dealerships, covering FTC Safeguards Rule, GLBA, OSHA, EPA, OFAC and Red Flags, F&I, and 24/7 network monitoring through a single vendor. ARMP combines compliance assessments, employee training, and continuous cyber security monitoring so a dealership can meet its regulatory obligations without stitching together multiple vendors. Based in Crystal Lake, Illinois; serving North America. Every link below points at the canonical HTML page. There is no separate markdown edition of this site. ## Core pages - [Home](https://autorisknow.com): What ARMP is, who it serves, and the FAQ covering audit turnaround and supported regulations. - [About](https://autorisknow.com/about): Company background and the team behind the compliance program. - [Packages](https://autorisknow.com/packages): Service tiers, from compliance audits through continuous testing and 24/7 monitoring. - [Ridgeback Network Defense](https://autorisknow.com/security): Continuous network monitoring appliance satisfying the FTC Safeguards Rule monitoring requirement. - [F&I Profits](https://autorisknow.com/f-and-i): Finance and insurance compliance, process optimization, and profitability. - [Industry News](https://autorisknow.com/news): Regulatory updates covering FTC Safeguards, CFPB, OSHA, EPA, and dealership cyber security. - [Videos](https://autorisknow.com/videos): Recorded walkthroughs and compliance training material. - [Contact](https://autorisknow.com/contact): How to reach ARMP for an assessment. ## Compliance guides - [Dealership Compliance Software](https://autorisknow.com/dealership-compliance-software): Dealership compliance software tracks a store's obligations under the FTC Safeguards Rule, OSHA, EPA, and F&I regulations in one system, with audit findings, employee training, vendor attestations, and cybersecurity monitoring tied to a single record. The distinction that matters when buying is whether the platform also performs the physical on-site audit or only stores what someone else found. - [Dealership Cybersecurity Requirements](https://autorisknow.com/dealership-cybersecurity-requirements): A US auto dealership's cybersecurity requirements come primarily from the FTC Safeguards Rule, which mandates multi-factor authentication, encryption of customer data at rest and in transit, access controls, asset inventory, secure disposal, activity logging, and either continuous monitoring or annual penetration testing with semiannual vulnerability assessments. - [Dealership F&I Compliance Audit](https://autorisknow.com/dealership-fi-compliance-audit): An F&I compliance audit reviews a sample of completed deal jackets against the consumer finance rules that govern them: Truth in Lending and Regulation Z, ECOA and Regulation B adverse action, FCRA and Red Flags, Regulation M for leases, OFAC screening, and IRS Form 8300 cash reporting. It is a file review, sampled by purchase type and vehicle type, not a questionnaire. - [EPA Regulations for Dealership Body Shops](https://autorisknow.com/epa-regulations-for-dealership-body-shops): A dealership body shop that sprays vehicle coatings is regulated under EPA Subpart HHHHHH, known as 6H, at 40 CFR Part 63. It requires trained and certified painters, enclosed spray booths or prep stations with filters meeting a 98 percent capture efficiency, HVLP or equivalent spray guns, enclosed gun cleaning, an initial notification, and five years of records. - [FTC Safeguards Rule Compliance for Car Dealerships](https://autorisknow.com/ftc-safeguards-rule-compliance-for-car-dealerships): Car dealerships that arrange financing or leases are "financial institutions" under the Gramm-Leach-Bliley Act, so the FTC Safeguards Rule (16 CFR Part 314) applies to them in full. Since June 9, 2023, a covered dealership must run a written information security program built on nine required elements, overseen by a designated Qualified Individual. - [How to Choose a Dealership Compliance Vendor](https://autorisknow.com/how-to-choose-a-dealership-compliance-vendor): Choose a dealership compliance vendor by testing four things: whether their own auditors come on site or the assessment is a questionnaire, which of the nine FTC Safeguards Rule elements they produce evidence for, whether their cybersecurity satisfies 16 CFR 314.4(d) through continuous monitoring, and whether you can export your audit and training history if you leave. - [Multi-Rooftop Dealership Group Compliance](https://autorisknow.com/multi-rooftop-dealership-group-compliance): A dealership group manages compliance across rooftops by running one framework everywhere, scoping access so each store sees only its own data while ownership sees all of it, and deciding deliberately whether the FTC Safeguards Rule information security program is written once for the group or separately per legal entity. Rooftop-by-rooftop tools make group-level reporting impossible. - [OSHA Compliance for Auto Dealerships](https://autorisknow.com/osha-compliance-for-auto-dealerships): Auto dealerships fall under OSHA general industry standards at 29 CFR Part 1910, with the heaviest obligations in service, body shop, and parts. The core requirements are hazard communication with accessible safety data sheets, lockout/tagout, electrical safety, personal protective equipment, respiratory protection, an emergency action plan, powered industrial truck certification, and injury recordkeeping under 29 CFR Part 1904. ## Industry news - [The Cybersecurity Comfort Syndrome](https://autorisknow.com/news/the-cybersecurity-comfort-syndrome): Dealerships can develop a false sense of security by relying on an IT team, endpoint detection software, restricted email access and cyber insurance. These prot... - [Flight Lessons for Better Dealership Security](https://autorisknow.com/news/flight-lessons-for-better-dealership-security): Using aviation’s “stay ahead of the airplane” principle, dealership cybersecurity requires continuous awareness, preparation and anticipation. Cybercriminals ac... - [Know Your Cyber Threats](https://autorisknow.com/news/know-your-cyber-threats): Dealerships face a wide range of cyber threats, including ransomware, phishing and business email compromise, third-party vendor breaches, unauthorized access,... - [Cybersecurity Isn’t My Job](https://autorisknow.com/news/cybersecurity-isnt-my-job): Cybersecurity is not solely the responsibility of an IT department, managed-service provider or dealership system vendor. A breach can compromise data flowing t... - [Scrub, Scour and Secure](https://autorisknow.com/news/scrub-scour-and-secure): A dealership’s data network needs the same regular cleaning and organization as its showroom, inventory and service department. Over time, unused devices, outda... - [Security vs. Speed: Stop Employees From Bypassing Cyber Protocols](https://autorisknow.com/news/security-vs-speed-stop-employees-from-bypassing-cyber-protocols): Employees may bypass cybersecurity rules to save time, close a sale or avoid inconvenient steps, making human behavior one of a dealership’s greatest vulnerabil... - [Defensive and Offensive Strategies for Thwarting Cyberattacks at AIS & NRC Summit](https://autorisknow.com/news/defensive-and-offensive-strategies-for-thwarting-cyberattacks-at-ais-nrc-summit): Terry Dortch, president and CEO of Automotive Risk Management Partners, and Scott Fogarty, CEO of Ridgeback Network Defense, share cyber protection best practic... - [Why You Must Scrutinize Vendors’ Cyber Security](https://autorisknow.com/news/why-you-must-scrutinize-vendors-cyber-security): Third-party vendors can create a direct path into a dealership’s customer, sales and financial data. Assuming a vendor has adequate security—or relying only on... - [Steering Clear of Cyberthreats](https://autorisknow.com/news/steering-clear-of-cyberthreats): Dealership IT staff are typically focused on keeping systems running and may not have the specialized expertise needed to manage cybersecurity. Basic measures s... - [Cyber Engagement 2025](https://autorisknow.com/news/cyber-engagement-2025): Modern cyber threats require dealerships to look beyond the protection offered by conventional security tools. The “Cyber Engagement 2025” report highlights vul... - [Take Control of the Cyber War Against Your Dealership](https://autorisknow.com/news/take-control-of-the-cyber-war-against-your-dealership): Cybercriminals have learned that ransoming data to stop sales operations can result in handsome rewards, and they are increasingly turning their attention to au... - [Strangle Hackers with Three-Point Wi-Fi Protection](https://autorisknow.com/news/strangle-hackers-with-three-point-wi-fi-protection): A poorly configured Wi-Fi network can give attackers access to dealership systems from the parking lot or another nearby public area. Using one shared network f... - [1 Thing We're Talking About: The importance of annual lift inspections](https://autorisknow.com/news/1-thing-were-talking-about-the-importance-of-annual-lift-inspections): Annual vehicle-lift inspections are an essential part of service-department safety. A proper inspection evaluates the lift’s structural, mechanical, hydraulic,... - [Lax Hygiene Greatest Risk of Dealership Data Breach](https://autorisknow.com/news/lax-hygiene-greatest-risk-of-dealership-data-breach): 2024—Terry Dortch, a seasoned expert with 25 years of experience as the CEO of Automotive Risk Management Partners, advocates that human eyes, hands, and experi... - [How to Satisfy the CARS Rule](https://autorisknow.com/news/how-to-satisfy-the-cars-rule): To maintain a healthy stance on the Combating Auto Retail Scams (CARS) Rule, consider conducting a "temperature" check of your dealership. The CARS Ru... - [F&I tip: Protect consumer information with physical audits as well as cybersecurity, compliance CEO says](https://autorisknow.com/news/fi-tip-protect-consumer-information-with-physical-audits-as-well-as-cybersecurity-compliance-ceo-says): Cybersecurity is an important and high-profile component of the federal Safeguards Rule requiring dealerships and other financial institutions to protect custom... - [Knuckle Under the CFPB](https://autorisknow.com/news/knuckle-under-the-cfpb): Best be certain your dealership complies absolutely with Consumer Financial Protection Board (CFPB) regulations, as any doubt to its constitutional authority wa... - [Physical Audits Support Compliance Software in Thwarting CARS Rule Violations and Other Auto Dealership Cyber Crimes](https://autorisknow.com/news/physical-audits-support-compliance-software-in-thwarting-cars-rule-violations-and-other-auto-dealership-cyber-crimes): CRYSTAL LAKE, IL, May 22, 2024 - As cyber crimes against auto dealerships escalate, dealers must recognize the importance of conducting frequent physical securi... - [Overcharging car buyers based on how they look? That’s illegal](https://autorisknow.com/news/overcharging-car-buyers-based-on-how-they-look-thats-illegal): Charging customers more based on their race, ethnicity or appearance is unfair and illegal. The FTC and State of Wisconsin alleged that three dealerships charge... - [Protecting Dealers from Cybercrimes & Data Hacks](https://autorisknow.com/news/protecting-dealers-from-cybercrimes-data-hacks): Dealerships face cyber risks similar to those confronting large national retailers, yet many owners underestimate their likelihood of being targeted. Hackers in... - [Contracts in the Automotive Business](https://autorisknow.com/news/contracts-in-the-automotive-business): Hello! I'm Terry Dortch from Automotive Risk Management Partners, and today, I'm going to delve into the intricate world of contracts in the automotive business... - [The Importance of Physical Audits in the Dealership](https://autorisknow.com/news/the-importance-of-physical-audits-in-the-dealership): Hello everyone! My name is Terry Dortch, representing Automotive Risk Management Partners. I spend quite a bit of time traveling across the States, interacting... - [FTC Investigates Illinois Auto Groups](https://autorisknow.com/news/ftc-investigates-illinois-auto-groups): The FTC investigated Liberty Auto City and Leader Automotive Group over possible unfair, deceptive or discriminatory sales and lending practices. Regulators sou... - [NADA Guide to FTC Safeguards Rule](https://autorisknow.com/news/nada-guide-to-ftc-safeguards-rule): Require • Implementation of certain technical changes/tools• Required policy changes/updates• Written reports and documentation• Training requirements Clarify t... - [Automotive Compliance: Understanding its Importance in the Industry](https://autorisknow.com/news/automotive-compliance-understanding-its-importance-in-the-industry): The automotive industry is one of the largest and most complex industries in the world. With millions of vehicles manufactured and sold every year, it is essent... ## Contact - Email: info@autorisknow.com - Phone: +1-815-345-3629 - Sitemap: https://autorisknow.com/sitemap.xml