The finalized BIS rule (Model Year 2027) prohibits connected vehicles with Chinese/Russian software or control. Learn how FOCI risk extends to open-source, why AppSec tools fall short, and what OEMs must do to achieve compliance and prove software provenance.