The connectedness of today’s cars to the broader digital ecosystem introduces cybersecurity risks that original equipment manufacturers must identify and address. These risks include not only a data breach that could expose the intimate details of an individual’s life but, even more critically, threats to the physical safety of a vehicle’s occupants. This final article in a four-part series on connected cars provides an overview of the legal regime governing vehicle cybersecurity, examines potential vulnerabilities, and offers best practices for implementing a cybersecurity and incident response framework, with insights from experts at Exponent, McDermott, Will & Schulte and Morrison Foerster. Part one covered FTC enforcement activity related to connected vehicles, part two discussed the legal framework and part three examined privacy compliance issues. See “What International Companies Should Do to Comply With the E.U. Cyber Resilience Act” (Jan. 28, 2026).