Real-Time Threat Detection vs. Latency in Dealership Cyber Security Tools
Key takeaways
- Most cyber security software options on the market involve latency, meaning threat data is not shown in real time.
- Dealers often outsource cyber security to a managed security services provider (MSSP) or hire internal staff because the field of EDR and MDR tools is complex and confusing.
- Automotive Risk Management Partners, powered by Ridgeback Network Defense, provides real-time network monitoring with no latency, showing activity minute to minute and second to second.
- The system also allows dealers to run historical reports, such as reviewing what happened a week earlier for tasks like cleaning up an asset list.
- Terry Dortch spent 20 years in retail automotive before founding Automotive Risk Management Partners, giving him firsthand knowledge of the dealership environment.
Summary
Most cyber security tools marketed to dealerships, from EDR to MDR platforms, carry built-in latency, meaning the data behind their reports and alerts is already outdated by the time you see it. With so many product options and acronyms to sort through, dealers typically hand the problem to an outside MSSP or an internal hire and hope the environment is being properly monitored, often without realizing the information they're acting on may reflect what happened days ago rather than what's happening now.
Automotive Risk Management Partners, powered by Ridgeback Network Defense, is built to close that gap by operating in real time, showing network activity minute to minute rather than through delayed reports, while still allowing historical reporting when needed for tasks like cleaning up an asset list. Dortch, drawing on his 20 years in dealership retail, frames this as a way for dealers to actually see and manage what's happening in their network as it occurs, protecting the dealership's revenue and the families whose jobs depend on it.
Transcript
The complexity of cyber security software choices
Hi, my name is Terry Dortch. I'm with Automotive Risk Management Partners. I want to talk to you today about cyber security software out there, EDR, MDR. I mean, I can throw all these acronyms around, most of you don't even understand what some of it is, and it is, it's very complicated. I just was working on a presentation for a dealer the other day, and I was listing out what the different options are, were like 20, you had 20 different options. It's confusing, it's complicated, which is why most dealers, what they do is they end up sending it off to an MSSP, you know, a managed security services provider, and they hope that those guys can handle it, or if they internalize it, they bring somebody on board that they hope has enough knowledge and that's doing everything properly to protect their environment.
Latency problem in typical cyber security tools
I get it, I know what I would be doing if I had a dealership, and I've been in those shoes, right? I was in the car business in the retail world for 20 years, so I understand that whole complex environment that you have to walk in. I want to tell you right now, most of that stuff is based on yesterday's news. What do I mean by that? There's latency built in. Everything has latency within the cyber security realm, except for Automotive Risk Management Partners, powered by Ridgeback Network Defense. Ours is real time. There's no latency at all. You don't have a report that was published, you know, two days ago or anything. Everything that you can look at, you look at real time, real time, today, right now, minute to minute, second to second. You can see exactly what's going on in your network.
Real-time monitoring and historical reporting
And if you want to run a report from what happened a week ago, because you're trying to clean up an asset list, or you're trying to do something, you can do that, all that's built into it. But it allows you to manage your network, it allows you to understand what's going on and make sure that you're protecting the asset that you have, which is that dealership and all the money that you make in it and the 100 plus families that are supported by it.
Closing call to action
Thanks. Give us a call, we'll take care of you.
Questions this video answers
Why do most dealership cyber security tools show outdated information?
Most cyber security software has latency built into it, meaning reports and data reflect what happened in the past rather than showing what is happening right now in the network.
What makes Automotive Risk Management Partners different from other cyber security providers?
Its solution, powered by Ridgeback Network Defense, operates in real time with no latency, letting dealers see exactly what is happening in their network minute to minute and second to second.
Can dealers still review past network activity with a real-time system?
Yes, the system allows dealers to run reports on past activity, such as reviewing what happened a week ago, which is useful for tasks like cleaning up an asset list.
Why do many dealers use a managed security services provider instead of choosing software themselves?
Because there are around 20 different cyber security software options and acronyms like EDR and MDR that are confusing, many dealers send the work to an MSSP or hire internal staff they hope can handle it properly.
Read more on this
-
Dealership Cybersecurity Requirements
A US auto dealership's cybersecurity requirements come primarily from the FTC Safeguards Rule, which mandates multi-factor authentication, encryption of custome...
Covered in this video
- Real-time network monitoring
- Latency in cyber security tools
- Managed security services providers (MSSP)
- EDR and MDR software
- Ridgeback Network Defense