Automated and connected vehicles involve rapidly developing technologies, with the potential to disrupt the United States transportation system. These technologies could provide many benefits, but there are still many issues that must be resolved before the vehicles can be implemented. Cybersecurity is one of those issues. Cybersecurity protections for automated and connected vehicle systems are not fully developed or completely understood. This undeveloped state presents an opportunity for state governments to become familiar with these systems as they develop, and refine state cybersecurity policies and oversight to meet the needs of future vehicle technologies.