Industry SecurityAction checklist

Car Lot, Dealership and Auto-Auction Security Checklist

A car-lot, dealership and auto-auction security checklist helps operators coordinate vehicle inventory, key custody, test drives, vehicle release, customer and contractor access, gates, lighting, cameras, auctions, after-hours activity, customer records and incident follow-up. It should be tailored to the business model because a retail dealership, storage lot and live auction have different traffic and custody patterns. Security personnel should verify assigned facts and report exceptions, not authorize financing, repossession, vehicle release, pursuit or force unless a separate lawful policy clearly assigns a trained role. Keep key locations, vehicle identifiers, camera limitations and customer data restricted. Call 911 for an immediate threat or theft in progress.

20 checks5 sectionsSources checked July 19, 2026
Why it matters

Use a system view, not a single-control view

Vehicle properties hold movable, high-value assets and keys while accommodating customers, technicians, transporters, vendors and events. Normal business movement can resemble unauthorized movement unless custody and authorization are clear.

Dealerships may also hold sensitive financing and leasing information. Physical security, privacy, operations and information-security leaders therefore need coordinated controls rather than a guard-only checklist.

Before you begin

How to use this checklist

  1. Map vehicle custody and authorization from arrival through storage, service, test drive, sale, auction and release using a restricted process record.
  2. Have management, sales, service, transport, privacy or information security, facilities and security approve role boundaries.
  3. Complete observable opening, operating and closing tasks without listing keys, high-value units, camera gaps or customer data in the public result.
  4. Hold unresolved releases and access exceptions under approved procedures; do not improvise pursuit, repossession or vehicle recovery.
  5. Trend theft, attempted theft, key, gate, test-drive and paperwork exceptions and verify corrective work.
Interactive checklist

Mark each task from current evidence

Use Not applicable only when the item genuinely does not apply, and follow the site’s approved escalation process for any urgent condition.

Section 1 of 5

Inventory and key accountability

Every vehicle movement should connect to an authorized person and traceable business purpose.

01The current vehicle inventory and lot-location process can identify unexplained exceptions without placing the full inventory in a public checklist.

Evidence to look for: Use the approved dealer, auction or fleet system and reconcile anomalies with an authorized inventory owner.

02Vehicle keys, fobs and programming devices have controlled issuance, return, storage and lost-key procedures. Priority review item

Evidence to look for: NHTSA advises not leaving keys in or on vehicles; keep storage location and identifiers restricted.

03Vehicle arrivals, transfers, service movements and releases require documented authorization. Priority review item

Evidence to look for: Confirm the person, vehicle and business record before movement; security should not create informal exceptions.

04High-value, recovered, damaged, evidence-related or otherwise restricted vehicles have management-defined custody rules.

Evidence to look for: Keep categories, locations and access details confidential and obtain legal or insurer guidance where needed.

Section 2 of 5

Customers, test drives and contractors

Verification should protect people, vehicles and information while supporting legitimate business activity.

05Test-drive authorization, vehicle assignment, expected return and overdue escalation follow a written business procedure. Priority review item

Evidence to look for: Sales management and counsel should define identity and record requirements; security receives only role-necessary information.

06Transporters, tow operators, vendors and contractors are matched to an expected company, vehicle and authorized contact. Priority review item

Evidence to look for: Do not rely only on a uniform, truck logo or verbal claim.

07Customer waiting, sales, service and auction registration areas keep restricted keys, records and workspaces out of casual access.

Evidence to look for: Use physical and administrative controls appropriate to actual customer-information risk.

08Employees know how to report suspected fraud, theft, threats and disorder without pursuit or unsupported confrontation. Priority review item

Evidence to look for: Policy should distinguish observation, manager notification, 911 calls and any specially trained response role.

Section 3 of 5

Lot, building and system conditions

Review actual after-dark and operating conditions while keeping vulnerabilities restricted.

09Vehicle rows, pedestrian routes, building entrances, key areas and loading zones have usable lighting. Priority review item

Evidence to look for: Observe outages, glare and shadow during actual operating hours; a qualified professional determines lighting specifications.

10Fences, bollards, gates and doors show no obvious damage or unauthorized opening and preserve emergency access. Priority review item

Evidence to look for: Do not publish weak points or attempt unqualified repair.

11Cameras, alarms and communication systems complete their authorized status checks and faults are ticketed.

Evidence to look for: Keep locations, blind spots, retention and alarm details in restricted systems.

12Fire lanes, exits, accessible routes and responder entrances are not blocked by display, stored or transported vehicles. Priority review item

Evidence to look for: Review after inventory changes and during events; qualified officials determine code requirements.

Section 4 of 5

Auctions, events and after-hours operations

Temporary increases in people, vehicles and cash or credential activity require a specific operating plan.

13Auction or event leadership has defined entrances, registration, bidder or guest credentials, vehicle movement and emergency contacts. Priority review item

Evidence to look for: Security confirms the approved plan and capacity assumptions rather than creating event rules at the gate.

14Pedestrian and vehicle routes reduce conflict during preview, staging, sale and release periods. Priority review item

Evidence to look for: Use trained traffic personnel and approved signs or barriers; do not stand in an unsafe vehicle path.

15After-hours employees and contractors have a check-in, work authorization and departure process.

Evidence to look for: Keep staffing patterns restricted and define missed check-in escalation.

16Closing includes a controlled review of vehicle custody, keys, access points, open work orders and unresolved incidents. Priority review item

Evidence to look for: Confirm completion in the approved business systems rather than copying sensitive data into the checklist.

Section 5 of 5

Information, incidents and improvement

Security records must protect customers while giving police, insurers and management usable facts.

17Paper and electronic customer information is accessible only to authorized roles and stored or disposed of through approved controls. Priority review item

Evidence to look for: FTC guidance says many dealers that arrange financing or long-term leases are covered by the Safeguards Rule; qualified compliance review is required.

18Theft, attempted theft, damage and access incidents are documented with objective facts, vehicle references, evidence and notifications.

Evidence to look for: Use restricted systems and preserve available video, access and custody records without altering evidence.

19Recurring key, test-drive, release, gate and inventory exceptions are reviewed and corrected.

Evidence to look for: Assign an owner, due date, temporary measure and verification step to each material gap.

20Employees know when to preserve a scene and call police rather than chase a vehicle or suspected offender. Priority review item

Evidence to look for: Prioritize life safety and accurate vehicle, direction and behavior observations from a safe position.

Current result

Complete the checklist to see a summary

Results are informational and do not certify compliance or eliminate risk.

Common mistakes

What can weaken the review

  • Leaving keys or fobs in vehicles or allowing informal key sharing.
  • Releasing a vehicle based only on a uniform, tow truck, transport document or verbal claim.
  • Publishing inventory, high-value vehicle, key, camera or patrol details.
  • Overlooking physical access to financing and leasing records.
  • Encouraging employees or guards to pursue a fleeing vehicle or suspected thief.
Practical questions

Frequently asked questions

What are the highest-priority dealership security controls?

Start with controlled keys, documented vehicle custody and release, verified test drives and transporters, usable after-dark lighting, maintained access points, reliable communication, customer-information safeguards and non-pursuit reporting procedures.

Should keys ever be left in lot vehicles?

NHTSA's public vehicle-theft guidance says to take the key and not leave it in or on a vehicle. Dealership management should maintain a controlled key system appropriate to its operations.

Does the FTC Safeguards Rule apply to auto dealerships?

FTC guidance says most dealers that arrange financing or lease vehicles for more than 90 days qualify as financial institutions for the rule. Applicability and required controls should be reviewed with qualified privacy and legal professionals.

What should security do after a vehicle theft?

Prioritize safety, call police under the approved procedure, preserve video, access, key and custody records, and document objective observations. Do not pursue the vehicle or independently attempt recovery.

Sources and evidence baseline

These references support the general planning baseline. Site-specific decisions still require the responsible organization and appropriate qualified professionals.

  1. Vehicle Theft PreventionNational Highway Traffic Safety Administration

    Key removal, locking, lighting and public vehicle-theft prevention principles.

  2. Automobile Dealers and the FTC's Safeguards Rule FAQsFederal Trade Commission

    Dealer customer-information risk assessment, physical safeguards, access control and program applicability.

  3. Police Working with the Business CommunityCity of Mesa Police Department

    Arizona CPTED, robbery response, evidence preservation and business security assessment.

  4. Security Assessment at First EntryCybersecurity and Infrastructure Security Agency

    Structured facility assessment and prioritization of observed vulnerabilities.

Source links checked: July 19, 2026

Related services and checklists

Continue with the service context or a neighboring planning tool that helps you act on what you found.