Highlight any text to annotate

The Spacecraft Cybersecurity Act directs NASA to strengthen cybersecurity protections for its spacecraft and space systems against cyber threats and interference. The bill requires NASA's Administrator to update the agency's acquisition policies and standards to include guidelines and controls for managing cybersecurity risks, with particular attention to systems developed by NASA contractors and commercial space service providers. NASA must complete an implementation plan within 270 days that outlines milestone dates for updating these policies, establishes a process for regularly reviewing cybersecurity controls, and estimates the resources needed for these efforts, with input from NASA's Chief Engineer, Chief Information Officer, and Principal Advisor for Enterprise Protection. The legislation responds to documented cybersecurity vulnerabilities identified in NASA audits, including past infiltration attempts targeting spacecraft launch codes and flight trajectories. Within 30 days of completing the plan, NASA must brief Congress on how these updates will create a comprehensive cybersecurity framework covering the full scope of NASA's space missions and operations.

Add a comment

Sign in to comment on this bill.

Annotate the text

Highlight any passage on the Summary or Full Text tab to attach a note. Annotations appear on the Annotations tab.