What is a dealership technology audit?

Contract register

Product, provider, internal owner, annual cost, term end, notice window, increase mechanic, termination rights. Build it from accounts payable so nothing is missed.

Data-flow map

For each connection: direction, objects, frequency, who owns it and who supports it. This is usually the most revealing artefact, because it exposes connections nobody documented and vendors with access nobody remembers granting.

Overlap and gap list

Where two systems claim the same workflow, and where a workflow is being run manually because no system owns it. Both are actionable; the second is often the larger cost.

Risk list

Vendors holding customer data without a current security review, connections with no named owner, single points of failure, and contracts renewing inside the next ninety days.

How to run one in a few weeks

Week one, collect invoices and contracts. Week two, interview each department head about what they use and what they do manually.

Week three, map connections with the help of the two main systems' providers. Week four, compile the register, the data-flow map, the overlap list and the risk list, and present them with recommended actions.

A small team can finish this without outside help.

Who should own the results

Give the audit to a named executive, often the general manager or the controller, with input from the IT lead and department heads. Results need an owner who can make decisions on contracts and priorities.

Store the register where authorized staff can update it and set a reminder for the next review. Otherwise it becomes out of date within a quarter.

Common mistakes in an audit

Relying on the IT department's list alone misses tools bought by departments. Stopping at the inventory without deciding actions leaves little value.

Not recording notice windows loses the leverage the audit could have created. Another is treating vendors as the audit's subject instead of workflows: ask what work each product supports and whether it still does.

Outputs to present to management

Present a one-page summary: the number of contracts and annual cost, the renewals due in the next six months, the top three overlaps, the largest risks and the recommended actions with owners and dates. Attach the register and the map as reference. A short summary is more likely to be acted upon than a long report.