,,ii #aagth ,,congress #b;d ,session ,s4 #ceaa ,,in ,,the ,,senate ,,of ,,the ,,united ,,states ,january #ac 7legislative day1 ,january #aj71 #bjbb,mr4 ,peters 7for himself and ,mr4 ,cornyn7 introduced the following bill2 which was read twice and referred to the ,committee on ,homeland ,security and ,governmental ,affairs ,a ,,bill ,to require a report on ,federal support to the cybersecurity of commercial satellite systems1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,satellite ,cybersecurity ,act4 #b4 ,definitions ,in this ,act3 7#a7 ,commercial satellite system ,the term commercial satellite system means an earth satellite owned and operated by a non-,federal entity4 7#b7 ,critical infrastructure ,the term critical infrastructure has the meaning given the term in subsection 7e7 of the ,critical ,infrastructure ,protection ,act of #bjja 7#db ,u4,s4,c4 #eaie;c7e774 7#c7 ,cybersecurity risk ,the term cybersecurity risk has the meaning given the term in section #bbji of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #fei74 7#d7 ,cybersecurity threat ,the term cybersecurity threat has the meaning given the term in section #ajb of the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aeja74 #c4 ,report on commercial satellite cybersecurity 7a7 ,study ,the ,comptroller ,general of the ,united ,states shall conduct a study on the actions the ,federal ,government has taken to support the cybersecurity of commercial satellite systems1 including as part of any action to address the cybersecurity of critical infrastructure sectors4 7b7 ,report ,not later than #a year after the date of enactment of this ,act1 the ,comptroller ,general of the ,united ,states shall report to ,congress on the study conducted under subsection 7a71 which shall include information on-- 7#a7 the effectiveness of efforts of the ,federal ,government in improving the cybersecurity of commercial satellite systems2 7#b7 the resources made available to the public by ,federal agencies to address cybersecurity threats to commercial satellite systems2 7#c7 the extent to which commercial satellite systems are reliant on or are relied on by critical infrastructure and an analysis of how commercial satellite systems1 and the threats to such systems1 are integrated into ,federal and non-,federal critical infrastructure risk analyses and protection plans2 7#d7 the extent to which ,federal agencies are reliant on commercial satellite systems and how ,federal agencies mitigate cybersecurity risks associated with those systems2 and 7#e7 the extent to which ,federal agencies coordinate or duplicate authorities and take other actions focused on the cybersecurity of commercial satellite systems4 7c7 ,consultation ,in carrying out subsections 7a7 and 7b71 the ,comptroller ,general of the ,united ,states shall coordinate with-- 7#a7 the ,secretary of ,homeland ,security2 7#b7 the ,director of the ,national ,institute of ,standards and ,technology2 7#c7 the ,secretary of ,defense2 7#d7 the ,federal ,communications ,commission2 7#e7 the ,national ,oceanic and ,atmospheric ,administration2 7#f7 the ,national ,aeronautics and ,space ,administration2 7#g7 the ,federal ,aviation ,administration2 and 7#h7 the head of any other ,federal agency determined appropriate by the ,comptroller ,general of the ,united ,states4 #d4 ,responsibilities of the ,cybersecurity and ,infrastructure ,security ,agency 7a7 ,definitions ,in this section3 7#a7 ,clearinghouse ,the term clearinghouse means the commercial satellite system cybersecurity clearinghouse required to be developed and maintained under subsection 7b77#a74 7#b7 ,director ,the term ,director means the ,director of the ,cybersecurity and ,infrastructure ,security ,agency4 7#c7 ,small business concern ,the term small business concern has the meaning given the term in section #c of the ,small ,business ,act 7#ae ,u4,s4,c4 #fcb74 7b7 ,establishment of commercial satellite system cybersecurity clearinghouse 7#a7 ,in general ,not later than #ahj days after the date of enactment of this ,act1 the ,director shall develop and maintain a commercial satellite system cybersecurity clearinghouse4 7#b7 ,requirements ,the clearinghouse shall-- 7,a7 be publicly available online2 7,b7 contain publicly available commercial satellite system cybersecurity resources1 including the recommendations developed under subsection 7c71 and any other materials developed by entities in the ,federal ,government1 for reference by entities that develop commercial satellite systems2 and 7,c7 include materials specifically aimed at assisting small business concerns with the secure development1 operation1 and maintenance of commercial satellite systems4 7#c7 ,content maintenance ,the ,director shall maintain current and relevant cybersecurity information on the clearinghouse4 7#d7 ,existing platform or website ,the ,director may establish and maintain the clearinghouse on an online platform or a website that is in existence as of the date of enactment of this ,act4 7c7 ,development of commercial satellite system cybersecurity recommendations 7#a7 ,in general ,the ,director shall develop voluntary cybersecurity recommendations designed to assist in the development1 maintenance1 and operation of commercial satellite systems4 7#b7 ,requirements ,the recommendations required under paragraph 7#a7 shall include materials addressing the following3 7,a7 ,risk-based1 cybersecurity-informed engineering1 including continuous monitoring and resiliency4 7,b7 ,planning for retention or recovery of positive control of commercial satellite systems in the event of a cybersecurity incident4 7,c7 ,protection against unauthorized access to vital commercial satellite system functions4 7,d7 ,physical protection measures designed to reduce the vulnerabilities of a commercial satellite system's command1 control1 and telemetry receiver systems4 7,e7 ,protection against communications jamming and spoofing4 7,f7 ,security against threats throughout a commercial satellite system's mission lifetime4 7,g7 ,management of supply chain risks that affect cybersecurity of commercial satellite systems4 7,h7 ,as appropriate1 the findings and recommendations from the study conducted by the ,comptroller ,general of the ,united ,states under section #c7;a74 7,i7 ,any other recommendations to ensure the confidentiality1 availability1 and integrity of data residing on or in transit through commercial satellite systems4 7d7 ,consultation ,with respect to the collation and development of clearinghouse content under subsection 7b77#b7 and the recommendations developed pursuant to subsection 7c71 the ,director shall consult with-- 7#a7 the heads of appropriate ,federal agencies with expertise and experience in satellite operations2 and 7#b7 non-,federal entities developing commercial satellite systems or otherwise supporting the cybersecurity of commercial satellite systems4