,i #aagth ,,congress #b;d ,session ,h4 ,r4 #gfbi ,,in ,,the ,,house ,,of ,,representatives ,april #bh1 #bjbb,mr4 ,malinowski 7for himself and ,mr4 ,garbarino7 introduced the following bill2 which was referred to the ,committee on ,homeland ,security1 and in addition to the ,committee on ,science1 ,space1 and ,technology1 for a period to be subsequently determined by the ,speaker1 in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned ,a ,,bill ,to require a report on ,federal support to the cybersecurity of commercial satellite systems1 establish a commercial satellite system cybersecurity clearinghouse in the ,cybersecurity and ,infrastructure ,security ,agency1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,satellite ,cybersecurity ,act4 #b4 ,report on commercial satellite cybersecurity2 ,,cisa commercial satellite system cybersecurity clearinghouse 7a7 ,study 7#a7 ,in general ,the ,comptroller ,general of the ,united ,states shall conduct a study on the actions the ,federal ,government has taken to support the cybersecurity of commercial satellite systems1 including as part of any action to address the cybersecurity of critical infrastructure sectors4 7#b7 ,report ,not later than two years after the date of the enactment of this ,act1 the ,comptroller ,general of the ,united ,states shall report to ,congress on the study conducted under paragraph 7#a71 which shall include information on-- 7,a7 the effectiveness of efforts of the ,federal ,government in improving the cybersecurity of commercial satellite systems2 7,b7 the resources made available to the public1 as of the date of the enactment of this ,act1 by ,federal agencies to address cybersecurity risks and cybersecurity threats to commercial satellite systems2 7,c7 the extent to which commercial satellite systems are reliant on or are relied on by critical infrastructure and an analysis of how commercial satellite systems1 and the cybersecurity threats to such systems1 are integrated into ,federal and non-,federal critical infrastructure risk analyses and protection plans2 7,d7 the extent to which ,federal agencies are reliant on commercial satellite systems and how ,federal agencies mitigate cybersecurity risks associated with those systems2 and 7,e7 the extent to which ,federal agencies coordinate or duplicate authorities and take other actions focused on the cybersecurity of commercial satellite systems4 7#c7 ,consultation ,in carrying out paragraphs 7#a7 and 7#b71 the ,comptroller ,general of the ,united ,states shall coordinate with appropriate ,federal agencies1 including-- 7,a7 the ,department of ,homeland ,security2 7,b7 the ,department of ,commerce2 7,c7 the ,department of ,defense2 7,d7 the ,department of ,transportation2 7,e7 the ,federal ,communications ,commission2 7,f7 the ,national ,aeronautics and ,space ,administration2 and 7,g7 the ,national ,executive ,committee for ,space-,based ,positioning1 ,navigation1 and ,timing4 7#d7 ,briefing ,not later than one year after the date of the enactment of this ,act1 the ,comptroller ,general of the ,united ,states shall provide a briefing to ,congress relating to carrying out paragraphs 7#a7 and 7#b74 7#e7 ,classification ,the report under paragraph 7#b7 shall be unclassified but may include a classified annex4 7b7 ,,cisa commercial satellite system cybersecurity clearinghouse 7#a7 ,establishment 7,a7 ,in general ,not later than #ahj days after the date of the enactment of this ,act1 the ,director shall establish a commercial satellite system cybersecurity clearinghouse4 7,b7 ,requirements ,the clearinghouse shall-- 7i7 be publicly available online2 7ii7 contain current1 relevant1 and publicly available commercial satellite system cybersecurity resources1 including the recommendations consolidated under paragraph 7#b71 and any other appropriate materials for reference by entities that develop commercial satellite systems2 and 7iii7 include materials specifically aimed at assisting small business concerns with the secure development1 operation1 and maintenance of commercial satellite systems4 7,c7 ,existing platform or website ,the ,director may establish the clearinghouse on an online platform or a website that is in existence as of the date of the enactment of this ,act4 7#b7 ,consolidation of commercial satellite system cybersecurity recommendations 7,a7 ,in general ,the ,director shall consolidate voluntary cybersecurity recommendations designed to assist in the development1 maintenance1 and operation of commercial satellite systems4 7,b7 ,requirements ,the recommendations consolidated under subparagraph 7,a7 shall include1 to the greatest extent practicable1 materials addressing the following3 7i7 ,risk-based1 cybersecurity-informed engineering1 including continuous monitoring and resiliency4 7ii7 ,planning for retention or recovery of positive control of commercial satellite systems in the event of a cybersecurity incident4 7iii7 ,protection against unauthorized access to vital commercial satellite system functions4 7iv7 ,physical protection measures designed to reduce the vulnerabilities of a commercial satellite system's command1 control1 or telemetry receiver systems4 7v7 ,protection against jamming or spoofing4 7vi7 ,security against threats throughout a commercial satellite system's mission lifetime4 7vii7 ,management of supply chain risks that affect the cybersecurity of commercial satellite systems4 7viii7 ,as appropriate1 and as applicable pursuant to the requirement under paragraph 7#a77;b77ii7 7relating to the clearinghouse containing current1 relevant1 and publicly available commercial satellite system cybersecurity resources71 the findings and recommendations from the study conducted by the ,comptroller ,general of the ,united ,states under subsection 7a77#a74 7ix7 ,any other recommendations to ensure the confidentiality1 availability1 and integrity of data residing on or in transit through commercial satellite systems4 7#c7 ,implementation ,in implementing this subsection1 the ,director shall-- 7,a7 to the extent practicable1 carry out such implementation as a public-private partnership2 7,b7 coordinate with the heads of appropriate ,federal agencies with expertise and experience in satellite operations1 including the entities described in subsection 7a77#c72 and 7,c7 consult with non-,federal entities developing commercial satellite systems or otherwise supporting the cybersecurity of commercial satellite systems1 including private1 consensus organizations that develop relevant standards4 7c7 ,definitions ,in this section3 7#a7 ,clearinghouse ,the term clearinghouse means the commercial satellite system cybersecurity clearinghouse required to be developed and maintained under subsection 7b77#a74 7#b7 ,commercial satellite system ,the term commercial satellite system means an earth satellite owned and operated by a non-,federal entity4 7#c7 ,critical infrastructure ,the term critical infrastructure has the meaning given such term in section #ajaf7;e7 of ,public ,law #ajg-ef 7#db ,u4,s4,c4 #eaie;c7e774 7#d7 ,cybersecurity risk ,the term cybersecurity risk has the meaning given such term in section #bbji of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fei74 7#e7 ,cybersecurity threat ,the term cybersecurity threat has the meaning given such term in section #ajb of the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aeja74 7#f7 ,director ,the term ,director means the ,director of the ,cybersecurity and ,infrastructure ,security ,agency4 7#g7 ,small business concern ,the term small business concern has the meaning given the term in section #c of the ,small ,business ,act 7#ae ,u4,s4,c4 #fcb74