Sec. 573. Federal Aviation Administration regulations, policy, and guidance
391 words·~2 min read·
/bill/118/hr/3935/ih/section-573A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Chapter 401 of title 49, United States Code, is further amended by adding at the end the following: The Administrator of the Federal Aviation Administration, in consultation with other agencies as the Administrator determines necessary, shall establish a national airspace system cyber threat management process to protect the national airspace system cyber environment, including the safety, security, and efficiency of the air navigation services provided by the Administration.
In establishing the national airspace system cyber threat management process under subsection (a), the Administrator shall, at a minimum— monitor the national airspace system for cybersecurity incidents; in consultation with appropriate Federal agencies, evaluate the cyber threat landscape for the national airspace system, including updating such evaluation on both annual and threat-based timelines; conduct national airspace system cyber incident analyses; create a cyber common operating picture for the national airspace system cyber environment; coordinate national airspace system cyber incident responses with other appropriate Federal agencies; track cyber incident detection, response, mitigation implementation, recovery, and closure; establish a process, or utilize existing processes, to collect relevant interagency and stakeholder national airspace system cyber incident data, including data from other Federal agencies and private persons; and consider any other matter the Administrator determines appropriate.
In this section: The term cyber common operating picture means the correlation of a detected cyber incident or cyber threat in the national airspace system and other operational anomalies to provide a holistic view of potential cause and impact. The term cyber environment means the information environment consisting of the interdependent networks of information technology infrastructures and resident data, including the internet, telecommunications networks, computer systems, and embedded processors and controllers.
The term cyber incident means an action that creates noticeable degradation, disruption, or destruction to the cyber environment and causes a safety or other negative impact on operations of— the national airspace system; civil aircraft; or aeronautical products and articles. The term cyber threat means the threat of an action that, if carried out, would constitute a cyber incident or an electronic attack. The term electronic attack means the use of electromagnetic spectrum energy to impede operations in the cyber environment, including through techniques such as jamming or spoofing. .
The analysis for chapter 401 of title 49, United States Code, is further amended by adding at the end the following: 40132. National airspace system cyber threat management process. .