GCS Stand-Alone Services

The Gramm-Leach-Bliley Act (GLBA) Safeguards Rule requires financial institutions to conduct regular risk assessments to evaluate the security of customer information and protect it from unauthorized access, which could lead to significant harm or inconvenience for customers. 

A  Physical & Administrative Safeguards Assessment covers a comprehensive evaluation of the physical and administrative measures in place to protect customer information and focuses on the following areas: Access Control, Facility Security, Device Security, Data Disposal Methods, and Policies and Procedures.

While annual assessments are mandatory, adopting a quarterly review schedule is strongly recommended to ensure continuous protection and compliance with evolving security risks.

The Gramm-Leach-Bliley Act (GLBA) Safeguards Rule requires financial institutions to conduct regular risk assessments to evaluate the security of customer information and protect it from unauthorized access, which could lead to significant harm or inconvenience for customers. 

A  Technical & Electronic Safeguards Assessment focuses on evaluating the technical and electronic measures a dealership has in place to protect customer data and covers the following areas: Data Encryption, Access Control and Authentication, Network and Systems Security, Data Backup and Recovery, System Monitoring and Logging, Patch Management and Software Updates, and Vendor Management.

While annual assessments are mandatory, adopting a quarterly review schedule is strongly recommended to ensure continuous protection and compliance with evolving security risks.

GCS provides a thorough review of your ComplyAuto status and configuration, including any integrated software such as Duo and Coro. We deliver a comprehensive report detailing the findings and offer targeted remediation recommendations to address any issues identified during the assessment, ensuring your compliance measures are optimized and up to date.

GCS Project Service is intended to cover any compliance related work which would fall outside of the Standard or Stand-Alone Services provided.

Project Services can include, but are not limited to:

• Addressing remediation steps from the onboarding process
• Onboarding of compliance related software
• Updating policies, vendor mapping, device inventories, employee records and training configurations
• Project Management on Compliance Issue Mitigation with Dealership Representatives and Third Party Vendors