,,ii #aaf? ,,congress #a/ ,session ,s4 #baha ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,july #ah1 #bjai,mr4 ,m>key 7= himself & ,mr4 ,blum5?al7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ,a ,,bill ,to require ! disclosure ( in=mation relat+ to cyb]attacks on aircraft sy/ems & ma9t5ance & gr\nd support sy/ems = aircraft1 to id5tify & address cyb]security vuln]abilities to ! ,unit$ ,/ates comm]cial aviation sy/em1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,cyb]security ,/&>ds = ,aircraft to ,improve ,resili5ce ,act ( #bjai or ! ,cyb] ,,air ,act4 #b4 ,def9itions ,9 ?is ,act3 7#a7 ,cov]$ air c>ri] ,! t]m cov]$ air c>ri] means an air c>ri] or a =eign air c>ri] 7z ^? t]ms are def9$ 9 section #djajb ( title #di1 ,unit$ ,/ates ,code74 7#b7 ,cov]$ manufactur] ,! t]m cov]$ manufactur] means an entity t-- 7,a7 manufactures or o!rwise produces aircraft & holds a production c]tificate "u section #ddgjd7;c7 ( title #di1 ,unit$ ,/ates ,code2 or 7,b7 manufactures or o!rwise produces electronic control1 communications1 ma9t5ance1 or gr\nd support sy/ems = aircraft4 7#c7 ,cyb]attack ,! t]m cyb]attack means ! unau?oriz$ access to aircraft electronic control or communications sy/ems or ma9t5ance or gr\nd support sy/ems = aircraft1 ei!r wirelessly or ?r\gh a wir$ connection4 7#d7 ,critical s(tw>e sy/ems ,! t]m critical s(tw>e sy/ems means s(tw>e sy/ems t c affect control ov] ! op]ation ( an aircraft4 7#e7 ,entry po9t ,! t]m entry po9t means ! means by :i* signals to control a sy/em on bo>d an aircraft or a ma9t5ance or gr\nd support sy/em = aircraft may be s5t or receiv$4 #c4 ,disclosure ( cyb]attacks by ! aviation indu/ry 7a7 ,9 g5]al ,n lat] ?an #bgj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,transportation %all prescribe regulations requir+ cov]$ air c>ri]s & cov]$ manufactur]s to disclose to ! ,f$]al ,aviation ,adm9i/ration any attempt$ or successful cyb]attack on any sy/em on bo>d an aircraft1 :e!r or n ! sy/em is critical to ! safe & secure op]ation ( ! aircraft1 or any ma9t5ance or gr\nd support sy/em = aircraft1 op]at$ by ! air c>ri] or produc$ by ! manufactur]1 z ! case may be4 7b7 ,use ( disclosures by ! ,f$]al ,aviation ,adm9i/ration ,! ,adm9i/rator ( ! ,f$]al ,aviation ,adm9i/ration %all use ! in=mation obta9$ ?r\gh disclosures made "u subsection 7a7 to improve ! regulations requir$ by section #d & to notify air c>ri]s1 aircraft manufactur]s1 & o!r ,f$]al ag5cies ( cyb]security vuln]abilities 9 sy/ems on bo>d an aircraft or ma9t5ance or gr\nd support sy/ems = aircraft4 #d4 ,incorporation ( cyb]security into requirem5ts = air c>ri] op]at+ c]tificates & production c]tificates 7a7 ,regulations ,n lat] ?an #bgj days aft] ! date ( ! enactm5t ( ?is ,act1 ! ,secret>y ( ,transportation1 9 consultation ) ! ,secret>y ( ,def5se1 ! ,secret>y ( ,homel& ,security1 ! ,attorney ,g5]al1 ! ,f$]al ,communications ,commission1 & ! ,director ( ,national ,intellig5ce1 %all prescribe regulations to incorporate requirem5ts relat+ to cyb]security into ! requirem5ts = obta9+ an air c>ri] op]at+ c]tificate or a production c]tificate "u *apt] #ddg ( title #di1 ,unit$ ,/ates ,code4 7b7 ,requirem5ts ,9 prescrib+ ! regulations requir$ by subsection 7a71 ! ,secret>y %all-- 7#a7 require all entry po9ts to ! electronic sy/ems ( ea* aircraft op]at+ 9 ,unit$ ,/ates airspace & ma9t5ance or gr\nd support sy/ems = su* aircraft to be equipp$ ) reasonable measures to protect aga9/ cyb]attacks1 includ+ ! use ( isolation measures to sep>ate critical s(tw>e sy/ems f noncritical s(tw>e sy/ems2 7#b7 require ! p]iodic evaluation ( ! measures describ$ 9 p>agraph 7#a7 = security vuln]abilities us+ be/ security practices1 includ+ ! appropriate application ( te*niques su* z p5etration te/+1 9 consultation ) ! ,secret>y ( ,def5se1 ! ,secret>y ( ,homel& ,security1 ! ,attorney ,g5]al1 ! ,f$]al ,communications ,commission1 & ! ,director ( ,national ,intellig5ce2 & 7#c7 require ! measures describ$ 9 p>agraph 7#a7 to be p]iodically updat$ bas$ on ! results ( ! evaluations conduct$ "u p>agraph 7#b74 #e4 ,manag+ cyb]security risks ( consum] communications equipm5t 7a7 ,9 g5]al ,! ,comm]cial ,aviation ,communications ,safety & ,security ,lead]%ip ,gr\p e/abli%$ by ! memor&um ( und]/&+ betwe5 ! ,dep>tm5t ( ,transportation & ! ,f$]al ,communications ,commission entitl$ ,framework = ,,dot-,,fcc ,coord9ation ( ,comm]cial ,aviation ,communications ,safety & ,security ,issues & dat$ ,janu>y #bi1 #bjaf 79 ?is section kn[n z ! ,lead]%ip ,gr\p71 %all be responsible = evaluat+ ! cyb]security vuln]abilities ( broadb& wireless communications equipm5t design$ = consum] use on bo>d aircraft op]at$ by cov]$ air c>ri]s t is in/all$ be=e1 on1 or aft]1 or is propos$ to be in/all$ on or aft]1 ! date ( ! enactm5t ( ?is ,act4 7b7 ,responsibilities ,to address cyb]security risks aris+ f malici\s use ( communications te*nologies on bo>d aircraft op]at$ by cov]$ air c>ri]s1 ! ,lead]%ip ,gr\p %all-- 7#a7 ensure ! developm5t ( effective me?ods = prev5t+ =eseeable cyb]attacks t exploit broadb& wireless communications equipm5t design$ = consum] use on bo>d su* aircraft2 & 7#b7 require ! implem5tation by cov]$ air c>ri]s1 cov]$ manufactur]s1 & communications s]vice provid]s ( all te*nical & op]ational security measures t are deem$ necess>y & suffici5t by ! ,lead]%ip ,gr\p to prev5t cyb]attacks describ$ 9 p>agraph 7#a74 7c7 ,report requir$ ,n lat] ?an "o ye> aft] ! date ( ! enactm5t ( ?is ,act1 & annually !reaft]1 ! ,lead]%ip ,gr\p %all submit to ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ( ! ,s5ate & ! ,committee on ,transportation & ,infra/ructure ( ! ,h\se ( ,repres5tatives a report on-- 7#a7 ! te*nical & op]ational security measures develop$ to prev5t =eseeable cyb]attacks t exploit broadb& wireless communications equipm5t design$ = consum] use on bo>d aircraft op]at$ by cov]$ air c>ri]s2 & 7#b7 ! /eps tak5 by cov]$ air c>ri]s1 cov]$ manufactur]s1 & communications s]vice provid]s to implem5t ! measures describ$ 9 p>agraph 7#a74