(a)
In general— The Administrator of the Federal Aviation Administration shall consider, where appropriate, revising Federal Aviation Administration regulations regarding airworthiness certification—
(1)
to address cybersecurity for avionics systems, including software components; and
(2)
to require that aircraft avionics systems used for flight guidance or aircraft control be secured against unauthorized access via passenger inflight entertainment systems through such means as the Administrator determines appropriate to protect the avionics systems from unauthorized external and internal access.
(b)
Consideration— In carrying out subsection (a), the Administrator shall consider the recommendations of the Aircraft Systems Information Security Protection Working Group under section 2111 of the FAA Extension Safety and Security Act of 2016 (Public Law 114–190; 130 Stat. 615).