Pass your next cyber insurance renewal. Satisfy the FTC. Keep selling cars.
Field-tested guides, a 2-minute readiness scorecard, and a renewal playbook for dealerships that arrange financing, lease, or otherwise handle customer financial data. No jargon. No fear-mongering.
The nine controls every carrier checks. In two minutes.
The Cyber Renewal Readiness Scorecard runs you through the nine controls every insurer and the FTC Safeguards Rule look for. You get a clear 0-100 score, a verdict band, and a one-line fix for every gap. No login. No drip campaigns.
- Multi-factor authentication18Critical
- Endpoint detection & response16Critical
- Encrypted, tested backups14Critical
- Incident response plan12Critical
- Written security program10
- Access controls8
- Security awareness training8
- Vendor & provider oversight7
- Monitoring & annual testing7
The 4-part FTC Safeguards series.
Read in order, or jump to the part most relevant to your renewal date.
Jun 3, 2026 · 7 min read
What the FTC Safeguards Rule Actually Requires of Independent Auto Dealers
Read part 1
Jun 7, 2026 · 8 min read
Nine Controls Your Dealership Needs to Pass a Cyber Insurance Renewal
Read part 2
Jun 10, 2026 · 8 min read
After CDK: What the 2024 Dealer Ransomware Attack Taught Every Independent Lot
Read part 3
Jun 14, 2026 · 9 min read
The Real Cost of Ignoring FTC Safeguards: Fines, Failed Renewals, and Downtime
Read part 4Where most independent lots sit today.
Based on the scorecard's nine controls. Most dealers we benchmark land in Stage 2 or early Stage 3 on first run. The scorecard tells you exactly which bucket you're in.
Exposed
Multiple gaps carriers flag. Policy unlikely to bind. FTC exposure is real.
Partial
Some controls in place. Key carrier-critical gaps remain.
Nearly there
Close. A few gaps stand between you and a clean renewal.
Strong
Well positioned. Worth confirming and documenting it holds at audit.
Flynaut becomes your IT and security team.
For most independent dealers, the realistic path is not staffing a security team to chase a renewal once a year. It is having one. We put the controls in, monitor them, test the backups, and keep the documentation current, so the rule and the renewal are handled and you can get back to the lot.
- We close the carrier-critical four (MFA, EDR, backups, IR plan) first, usually in 2-4 weeks.
- We hand your broker an evidence packet they can verify, not promises they cannot.
- We document the program in plain English so it satisfies the FTC and your auditors.
- One predictable monthly number replaces the surprise of an unbindable policy.
If any of these are missing, the renewal does not bind.
- Multi-factor authentication18 pts
- Endpoint detection & response16 pts
- Encrypted, tested backups14 pts
- Incident response plan12 pts
Five other controls round out the program. The scorecard tells you where you stand on all nine in under two minutes.
Stop guessing whether your renewal will bind.
Run the 9-question scorecard. Get a 0-100 number and a one-line fix for every gap. Hand the result to your broker, or to us.
This hub is informational and not legal advice. Confirm your specific FTC and insurance obligations with counsel.