Protect Your Business: Lessons from the CDK Global Cyber Incident

By Rodelio Cecilia

As the CEO of RJ Computers, a managed service provider dedicated to serving small businesses in Southern California, I’ve seen firsthand how critical robust cybersecurity measures are to maintaining business continuity and protecting sensitive data. The recent cyber incident at CDK Global, which affected 15,000 auto dealerships across the US and Canada, underscores the importance of these measures. Here’s my take on what we can learn from this incident.

The CDK Global Incident: A Wake-Up Call

Last week on June 19th, 2024, CDK Global faced a severe cyber incident that forced them to shut down most of their systems. This precautionary move aimed to protect customer data and minimize damage. Despite their efforts, a second cyber incident occurred later that evening, exacerbating the disruption and extending the downtime into the next day.

The impact on auto dealerships was substantial. CDK’s software is integral to their operations, managing everything from customer appointments to deal records and service scheduling. With systems offline, dealerships couldn’t access vital information, threatening their ability to close sales and potentially driving customers to competitors.

Proactive Measures Are Non-Negotiable

At RJ Computers, we emphasize the importance of proactive cybersecurity. The CDK incident is a stark reminder that investing in advanced threat detection and response solutions is not optional—it’s essential. Regularly updated cybersecurity policies and comprehensive employee training are also critical. Our team ensures that all staff members are aware of potential threats and know how to respond effectively, significantly reducing the risk of successful cyberattacks.

Data Backup and Recovery: A Lifeline

Having a robust data backup and recovery plan is crucial. Regular backups ensure that, in the event of a cyber incident, businesses can quickly restore critical data and resume operations. At RJ Computers, we don’t just implement these backups; we rigorously test them to ensure they work when needed most.

Managing Third-Party Risks

Many businesses rely on third-party vendors for various services, just as CDK’s customers rely on them. It’s vital to assess the cybersecurity practices of these vendors to ensure they meet your security standards. Clear communication channels with vendors are essential for fast response and coordination during incidents. At RJ Computers, we help our clients navigate these relationships, ensuring that all parties uphold stringent security measures.

Incident Response Planning: Be Prepared

An effective incident response plan can make a significant difference in minimizing the impact of a cyber incident. This plan should outline steps for identifying, containing, and eradicating threats, as well as communication strategies for informing stakeholders. At RJ Computers, we conduct regular drills and simulations to ensure our clients are prepared to execute their plans under pressure.

Transparent Customer Communication

During a cyber incident, transparent and timely communication with customers is essential. Informing them about the situation, the steps being taken to resolve it, and what they can expect helps maintain trust and reduce uncertainty. We emphasize this approach with our clients, ensuring they understand the importance of keeping their customers in the loop.

Our Role at RJ Computers

As an MSP, RJ Computers is committed to enhancing the cybersecurity posture of Southern California’s small businesses. We offer comprehensive managed IT and cybersecurity services, including 24/7 monitoring, regular security assessments, and detailed incident response planning. Our goal is to build resilient systems that can withstand cyber threats and ensure business continuity.

Moreover, we believe in educating our clients about cybersecurity. By fostering a culture of security awareness and proactive risk management, we help small businesses navigate the complexities of the digital landscape with confidence.

Conclusion

The CDK Global cyber incident is a powerful reminder of the vulnerabilities inherent in our digital world. For small businesses, the lessons are clear: proactive cybersecurity measures, robust data backup and recovery plans, effective incident response strategies, and transparent customer communication are essential. At RJ Computers, we are dedicated to helping our clients implement these measures and safeguard their operations against cyber threats. I am committed to ensuring that we remain vigilant and proactive in our approach to cybersecurity, providing our clients with the peace of mind they deserve.

At RJ Computers, we specialize in comprehensive IT services, including managed IT services, cybersecurity services, network security services, business continuity services, data backup and recovery services, VoIP services, managed Office 365 services, and cloud services. Our help desk services and remote IT support services ensure that your business stays protected and operational. We also offer co-managed IT services and compliance services, such as CMMC and HIPAA compliance services, serving clients in Southern California, across various industries.