Section 1 Short title
This Act may be cited as the “Enhancing Satellite Cybersecurity Act”.
Enhancing Satellite Cybersecurity Act
A BILL
To require a report on Federal support of the cybersecurity of commercial satellite systems, and for other purposes.
Sec. 2 Definition
In this Act, the term commercial satellite system means an earth satellite owned and operated by a non-Federal entity.
Sec. 3 Report on commercial satellite cybersecurity
Not later than 2 years after the date of enactment of this Act, the Comptroller General of the United States shall report to Congress on the actions the Federal Government has taken to support the cybersecurity of commercial satellite systems, which shall include information on—
the extent to which Federal agencies are reliant on commercial satellite systems owned wholly or in part or controlled by foreign entities, and how Federal agencies mitigate associated cybersecurity risks; and
the extent to which Federal agencies are reliant on commercial satellite systems with physical structures, such as satellite ground control systems, in foreign countries, and how Federal agencies mitigate associated cybersecurity risks.
Sec. 4 Responsibilities of the cybersecurity and infrastructure security agency
In general— The Director of the Cybersecurity and Infrastructure Security Agency shall consolidate voluntary cybersecurity recommendations designed to assist in the development, maintenance, and operation of commercial satellite systems.
Requirements— The recommendations consolidated under subsection (a) shall include, to the greatest extent practicable, materials addressing the following:
Protection against vulnerabilities posed by ownership of commercial satellite systems or commercial satellite system companies by foreign entities.
Protection against vulnerabilities posed by locating physical infrastructure, such as satellite ground control systems, in foreign countries.