,i  #aahth ,,congress  #b;d ,session    
,h4 ,r4 #hife  ,,in ,,the ,,house ,,of  
,,representatives  ,july #i1 #bjbd ,mr4 
,frost 7for himself and ,mr4 ,beyer7    
introduced the following bill2 which was
 referred to the ,committee on ,science1
 ,space1 and ,technology  ,a ,,bill  ,to
 promote the development of certain     
plans1 policies1 and standards for      
managing cybersecurity risks and        
protecting sensitive technology relating
 to ,national ,aeronautics and ,space   
,administration spacecraft systems1 and 
for other purposes4  #a4 ,short title   
,this ,act may be cited as the          
,spacecraft ,cybersecurity ,act4  #b4   
,findings ,congress finds the following3
  7#a7 ,malicious actors have targeted  
sensitive technology data maintained at 
certain ,national ,aeronautics and      
,space ,administration 7,,nasa7 centers4
  7#b7 ,a #bjai ,,nasa ,inspector       
,general audit reported that potential  
infiltration into ,,nasa's space flight 
systems to acquire launch codes and     

flight trajectories of spacecraft       
remains a particular concern of ,,nasa's
 information technology security        
managers4  7#c7 ,the #bjaa ,united      
,states-,china ,economic and ,security  
,commission's annual report stated that 
at least two ,u4,s4 ,government         
satellites have each experienced at     
least two separate instances of         
interference apparently consistent with 
cyber activities against their command  
and control systems44  7#d7 ,space      
,policy ,directive-#e on ,cybersecurity 
,principles for ,space ,systems issued  
guidance that ,federal departments and  
agencies support practices within the   
,federal ,government and across the     
commercial space industry that protect  
space assets and their supporting       
infrastructure from cyber threats and   
ensure continuity of operations44  7#e7 
,,nasa relies on industry contractors   
and commercial entities to carry out    
development of its advanced space       
systems and to provide services such as 

transporting ,,nasa crew to and from the
 ,international ,space ,station4  7#f7  
,a #bjbd ,government ,accountability    
,office audit found that ,,nasa lacks a 
plan and time frames to update its      
acquisition policies and standards to   
address cybersecurity controls4  #c4    
,plan and policy reviews  7a7 ,sense of 
,congress ,it is the sense of ,congress 
that the ,administrator of the ,national
 ,aeronautics and ,space ,administration
 7,,nasa7 should take every action to   
ensure that robust cybersecurity        
measures are in place to protect        
sensitive technology data relating to   
space systems developed within ,,nasa1  
at ,,nasa contractors1 or under         
commercial services arrangements4  7b7  
,in general ,the ,administrator shall   
ensure that ,,nasa's acquisition        
policies and standards for space systems
 and services--  7#a7 include guidelines
 and controls for managing cybersecurity
 risks to such systems and services1    
consistent with ,space ,policy          

,directive-#e on ,cybersecurity         
,principles for ,space ,systems2 and    
7#b7 are updated1 as appropriate1 to    
address changing cybersecurity threats  
to such systems and services4  7c7      
,implementation plan ,not later than    
#bgj days after the date of the         
enactment of the ,act1 the              
,administrator of ,,nasa shall complete 
an implementation plan to update        
,,nasa's acquisition policies and       
standards for space systems and         
services1 and incorporate guidelines and
 controls required to protect against   
cybersecurity risk and cybersecurity    
threats to such systems and services4   
,the ,administrator shall ensure the    
participation and input of the ,chief   
,engineer1 ,chief ,information ,officer1
 and the ,principal ,advisor for        
,enterprise ,protection of ,,nasa in the
 development of such plan4 ,such plan   
shall include the following3 7#a7       
,milestone dates for completing such    
updates4  7#b7 ,a process and frequency 

for reviewing ,,nasa's cybersecurity    
policies1 procedures1 and controls for  
spacecraft programs to address changing 
cybersecurity risks and cybersecurity   
threats to such systems and services4   
7#c7 ,an estimate of the resources      
required for carrying out the updates   
and reviews under paragraphs 7#a7 and   
7#b71 respectively4  7d7 ,briefing ,not 
later than #cj days after the completion
 of the implementation plan under       
subsection 7c71 the ,administrator of   
,,nasa shall brief the ,committee on    
,science1 ,space1 and ,technology of the
 ,house of ,representatives and the     
,committee on ,commerce1 ,science1 and  
,transportation of the ,senate on such  
plan4 ,such briefing shall also address 
how such plan can inform the development
 of a cybersecurity risk management     
framework for spacecraft developed or   
used by ,,nasa in pursuit of its        
missions that encompasses end-to-end    
mission systems and operations4