Dealership Security After an Acquisition: What to Review First

EyeQ Insider

Dealership Security After an Acquisition: What to Review First

Imagine the first evening after a dealership acquisition closes. The new general manager has the building keys, employees have received their updated schedules and tomorrow’s service appointments are booked. Then a basic question comes up: If someone enters the back lot tonight, who gets the call?

The answer may still be the previous owner.

Dealership security after an acquisition starts with confirming who controls the systems, what protection is active and who can authorize a response. Cameras, credentials and monitoring agreements need an explicit handover, with named responsibilities and a verified start time. An ownership change alone does not confirm that any of those details have been updated.

For dealer principals and acquisition teams, this review belongs alongside the operational work of taking over the store. Begin before closing when access and transaction terms allow, then validate the arrangements as soon as control transfers. The immediate goal is to keep protection working while establishing a reliable picture of what the dealership has inherited.

Start the dealership security assessment with ownership and continuity

A camera mounted above the service drive tells you where a device is installed. It tells you little about who owns it, who administers it or whether anyone reviews its alerts.

Build a security inventory that connects the equipment to the people and agreements behind it. Include cameras, recorders, alarm panels, electronic gates, access control, key cabinets, network connections and any separate overflow locations. Record the service provider, account owner, renewal date and responsible internal contact for each system.

Ask which components are owned, leased or supplied through a service agreement. Have the transaction team and providers confirm whether contracts, licenses and accounts can transfer, whether approval is required and when any replacement arrangements become effective. Equipment can remain physically in place while the service supporting it changes.

This is a coordination task for operations, IT, purchasing and the deal team. Avoid leaving it entirely with the incoming general manager, who may have neither the contracts nor the administrator permissions needed to resolve a problem.

Confirm the first night of coverage

Before ending the first day under new ownership, obtain confirmation of the active monitoring hours, covered locations, escalation contacts and person responsible for unresolved issues. Include weekend and holiday arrangements if closing occurs near either.

For example, an acquisition might include the main dealership and a leased storage lot, while the inherited monitoring agreement covers only the main property. Record that discrepancy immediately and assign an interim protection plan while permanent coverage is evaluated.

Keep existing protection operating during changes wherever feasible. Coordinate account transfers, network work and vendor changes so a cancelled service is not discovered after the replacement was expected to begin. EyeQ’s security audit services can help dealership leaders assess vulnerabilities and organize improvement priorities around the actual property.

Review dealership access control and key permissions

Ownership changes can leave access permissions out of step with current responsibilities. A former manager may retain a camera login. A vendor may still use a shared gate code. An employee staying with the dealership may need a different level of access in the buyer’s organization.

Reconcile permissions against the confirmed employee roster, approved vendors and any documented transition arrangements. Being associated with the previous owner does not automatically make someone unauthorized; their continuing access should have a defined business purpose, an approving manager and an expiration or review date.

Review both physical and digital access:

  • Building keys, gate remotes, alarm codes and access cards.
  • Vehicle key cabinets and permissions to remove keys or fobs.
  • Camera applications, recording systems and video exports.
  • Administrator accounts, recovery email addresses and remote vendor connections.

Have authorized IT and security personnel replace shared credentials where appropriate, revoke obsolete access and establish individual accounts where supported. Verify that recovery methods belong to the acquiring organization. A password reset is incomplete if the recovery message still goes to a former employee’s personal account.

Physical keys require their own accounting. If distribution records are incomplete, determine which locks or access devices need replacement or reconfiguration based on exposure. Do not assume a new alarm code addresses every route into the property.

Preserve necessary access for employees opening the service department, emergency responders and authorized contractors. Coordinate changes with department leaders, test approved access and provide a clear way to resolve problems. The purpose is a controlled transition that employees can actually follow.

Verify inherited security cameras and monitoring coverage

Once authorized access is established, compare the system inventory with conditions on the ground. Ask an authorized employee to demonstrate live views, recent recordings and the process for retrieving a specific event. A working live image does not establish that footage is being recorded or retained for the expected period.

Check camera names against a current site map. Labels such as “Rear Lot 2” can become confusing when an incoming team uses different building names or combines reporting across stores. Record which entrances, inventory areas and service zones each camera covers.

Review conditions after dark as well as during business hours. Lighting, parked vehicles and reflections may affect the usefulness of an image. Pay particular attention to areas whose purpose will change under the buyer’s operating plan, such as a former employee parking area being used for saleable inventory.

Separate recording from an active response

An inherited system may record continuously but provide no event review or intervention. Another agreement may cover certain zones only during specified hours. Ask the provider to explain what generates an alert, who reviews it and what happens next.

EyeQ Virtual Guard combines AI-powered video analytics with human verification and authorized response. Analytics can flag configured activity; they do not independently establish criminal intent or prove that someone has permission to be there. Operators need current site procedures to interpret what they see and act appropriately.

Confirm that the incoming team understands the difference between a recorded image, a generated alert and a reviewed event. Around-the-clock service also should not be interpreted as a person continuously watching every camera. The agreement should define coverage and intervention.

Plan any changes to internet service, network equipment or recording hardware with the security provider. Identify dependencies before disconnecting equipment, and verify service afterward. Where an interruption cannot be avoided, assign responsibility for an appropriate interim arrangement.

Update security response procedures and incident records

A familiar delivery truck enters through a side gate after hours. Under the previous owner, that arrival may have been routine. Under the new operating plan, deliveries may require advance approval.

Without updated instructions, the same activity can produce conflicting decisions.

Rewrite the site procedures around the new dealership’s hours, authorized activities and escalation authority. Name a primary contact and backup, explain how authority moves when someone is unavailable and identify who can approve temporary exceptions. Monitoring teams need instructions for legitimate late work, cleaning crews, transport arrivals and service customers using designated drop-off areas.

If remote audio intervention is included, confirm when it is appropriate and when an operator should follow another response path. Avoid treating every unfamiliar person as an intruder. Procedures should distinguish observable activity from assumptions about intent, and employees should follow emergency procedures when immediate danger requires emergency assistance.

EyeQ’s U.S.-based Security Operations Center provides human review and response coordination. For an acquired dealership, the useful operational question is whether the team reviewing events has the correct property information and escalation instructions.

Historical records deserve attention too. Subject to the transaction terms and authorized access, identify open incidents, relevant footage and pending requests associated with claims or investigations. Coordinate with counsel and insurers on preservation obligations before changing retention settings, replacing recorders or closing accounts.

Establish who can view, export and share recordings. Keep access tied to job responsibilities, with approved handling procedures for material showing customers or employees. Review camera placement, notices, retention and any audio practices for the dealership’s applicable requirements. A change in ownership is a useful point to clarify these responsibilities.

Consistent incident reporting helps the incoming team connect events with follow-up actions. Reports should distinguish what was observed, what was verified, what response occurred and what remains unresolved.

Turn acquisition findings into a first-month security plan

The review will probably uncover a mix of urgent gaps, ordinary maintenance and longer-term improvements. Give each finding a responsible owner, a target date and a way to verify completion. Avoid describing an issue as resolved simply because a work order was submitted.

Use the following sequence as a planning framework, adjusting it to the property and transaction:

  • At the transfer of control: Confirm active protection, administrator access, current response contacts and an interim plan for known gaps.
  • During the first week: Reconcile credentials, validate recordings, confirm covered locations and review unresolved incidents with authorized personnel.
  • During the first month: Complete coordinated response exercises, address priority deficiencies and approve a documented improvement plan.

Test the handoff with the monitoring provider’s advance agreement. An authorized walkthrough can confirm the camera view, event review, notification route and documentation process. Do not stage an unannounced intrusion or trigger an unnecessary emergency dispatch.

Record what the exercise actually establishes. If an alert reached the backup contact but the property map used an obsolete entrance name, fix the instructions and verify that specific correction. A useful test exposes the details that people might otherwise learn during an incident.

For a dealer group, standardize essential reporting and accountability across locations while retaining site-specific procedures. A store with a detached service building and separate inventory lot needs instructions that reflect those conditions.

The acquisition review is complete when the incoming team can explain who has access, what is covered, how events are handled and who owns the remaining work. That gives dealership leadership a practical foundation for improving security as the store settles into its new operation.

Bring EyeQ into your dealership security transition

Taking over a dealership is an opportunity to establish clear security responsibilities from the start. EyeQ can help assess property vulnerabilities and evaluate monitoring around the dealership’s operating needs. Explore EyeQ Virtual Guard to discuss protection for your newly acquired location.

Frequently Asked Questions

What should a dealership review first after an acquisition?

Start with active monitoring coverage, system ownership, administrator access and emergency contacts. Confirm who is responsible for protection when control transfers, then review credentials, recordings and site procedures.

Do security contracts automatically transfer to a new dealership owner?

Do not assume they do. Have the transaction team and service providers verify assignment provisions, required approvals, account changes and effective dates. Confirm continuity before cancelling or replacing services.

Should a dealership replace all security cameras after an acquisition?

Evaluate the existing equipment first. Check ownership, condition, recording performance, administrator control and suitability for the new operating plan. Some components may remain useful, while others require repair or replacement.

How should former employee and vendor access be handled?

Compare existing permissions with the approved roster and transition agreements. Remove obsolete access, document continuing authorization and set review or expiration dates for temporary arrangements.

How can a dealership test its monitoring handover?

Arrange a controlled exercise with the provider. Verify the relevant camera view, event review, contact sequence and reporting. Agree on the scope beforehand to avoid unnecessary emergency responses.

Get a Free Quote!