,i #aah? ,,congress #b;d ,session ,h4 ,r4 #hife ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,july #i1 #bjbd ,mr4 ,fro/ 7= himself & ,mr4 ,bey]7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,sci5ce1 ,space1 & ,te*nology ,a ,,bill ,to promote ! developm5t ( c]ta9 plans1 policies1 & /&>ds = manag+ cyb]security risks & protect+ s5sitive te*nology relat+ to ,national ,a]onautics & ,space ,adm9i/ration spacecraft sy/ems1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,spacecraft ,cyb]security ,act4 #b4 ,f9d+s ,congress f9ds ! foll[+3 7#a7 ,malici\s actors h t>get$ s5sitive te*nology data ma9ta9$ at c]ta9 ,national ,a]onautics & ,space ,adm9i/ration 7,,nasa7 c5t]s4 7#b7 ,a #bjai ,,nasa ,inspector ,g5]al audit report$ t pot5tial infiltration into ,,nasa's space flight sy/ems to acquire laun* codes & flight trajectories ( spacecraft rema9s a p>ticul> conc]n ( ,,nasa's in=mation te*nology security manag]s4 7#c7 ,! #bjaa ,unit$ ,/ates-,*9a ,economic & ,security ,commission's annual report /at$ t at lea/ two ,u4,s4 ,gov]nm5t satellites h ea* exp]i5c$ at lea/ two sep>ate in/ances ( int]f]5ce app>5tly consi/5t ) cyb] activities aga9/ _! comm& & control sy/ems44 7#d7 ,space ,policy ,directive-#e on ,cyb]security ,pr9ciples = ,space ,sy/ems issu$ guidance t ,f$]al dep>tm5ts & ag5cies support practices )9 ! ,f$]al ,gov]nm5t & across ! comm]cial space indu/ry t protect space assets & _! support+ infra/ructure f cyb] ?reats & ensure cont9uity ( op]ations44 7#e7 ,,nasa relies on indu/ry contractors & comm]cial entities to c>ry out developm5t ( its advanc$ space sy/ems & to provide s]vices su* z transport+ ,,nasa crew to & f ! ,int]national ,space ,/ation4 7#f7 ,a #bjbd ,gov]nm5t ,acc\ntability ,(fice audit f\nd t ,,nasa lacks a plan & "t frames to update its acquisition policies & /&>ds to address cyb]security controls4 #c4 ,plan & policy reviews 7a7 ,s5se ( ,congress ,x is ! s5se ( ,congress t ! ,adm9i/rator ( ! ,national ,a]onautics & ,space ,adm9i/ration 7,,nasa7 %\ld take e action to ensure t robu/ cyb]security measures are 9 place to protect s5sitive te*nology data relat+ to space sy/ems develop$ )9 ,,nasa1 at ,,nasa contractors1 or "u comm]cial s]vices arrangem5ts4 7b7 ,9 g5]al ,! ,adm9i/rator %all ensure t ,,nasa's acquisition policies & /&>ds = space sy/ems & s]vices-- 7#a7 include guidel9es & controls = manag+ cyb]security risks to su* sy/ems & s]vices1 consi/5t ) ,space ,policy ,directive-#e on ,cyb]security ,pr9ciples = ,space ,sy/ems2 & 7#b7 are updat$1 z appropriate1 to address *ang+ cyb]security ?reats to su* sy/ems & s]vices4 7c7 ,implem5tation plan ,n lat] ?an #bgj days aft] ! date ( ! enactm5t ( ! ,act1 ! ,adm9i/rator ( ,,nasa %all complete an implem5tation plan to update ,,nasa's acquisition policies & /&>ds = space sy/ems & s]vices1 & incorporate guidel9es & controls requir$ to protect aga9/ cyb]security risk & cyb]security ?reats to su* sy/ems & s]vices4 ,! ,adm9i/rator %all ensure ! p>ticipation & input ( ! ,*ief ,eng9e]1 ,*ief ,in=mation ,(fic]1 & ! ,pr9cipal ,advisor = ,ent]prise ,protection ( ,,nasa 9 ! developm5t ( su* plan4 ,su* plan %all include ! foll[+3 7#a7 ,mile/one dates = complet+ su* updates4 7#b7 ,a process & frequ5cy = review+ ,,nasa's cyb]security policies1 proc$ures1 & controls = spacecraft programs to address *ang+ cyb]security risks & cyb]security ?reats to su* sy/ems & s]vices4 7#c7 ,an e/imate ( ! res\rces requir$ = c>ry+ out ! updates & reviews "u p>agraphs 7#a7 & 7#b71 respectively4 7d7 ,brief+ ,n lat] ?an #cj days aft] ! completion ( ! implem5tation plan "u subsection 7c71 ! ,adm9i/rator ( ,,nasa %all brief ! ,committee on ,sci5ce1 ,space1 & ,te*nology ( ! ,h\se ( ,repres5tatives & ! ,committee on ,comm]ce1 ,sci5ce1 & ,transportation ( ! ,s5ate on su* plan4 ,su* brief+ %all also address h[ su* plan c in=m ! developm5t ( a cyb]security risk managem5t framework = spacecraft develop$ or us$ by ,,nasa 9 pursuit ( its missions t encompasses end-to-end mission sy/ems & op]ations4