Sec. 391. FINDINGS

385 words·~2 min read·/statute-compilations/comps-17764/sec-391

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

## SEC. 391 FINDINGS Congress finds the following: ####

(1)Congress has tasked the FAA with responsibility for securing the national airspace system, including the air traffic control system and other air navigation services, civil aircraft, and aeronautical products and articles through safety regulation and oversight. These mandates have included protecting against cyber threats affecting aviation safety or the Administration’s provision of safe, secure, and efficient air navigation services and airspace management. ####

(2)In 2016, Congress passed the FAA Extension, Safety, and Security Act of 2016, pursuant to which the FAA enhanced the cybersecurity of the national airspace system by— #####

(A)developing a cybersecurity strategic plan; #####

(B)coordinating with other Federal agencies to identify cyber vulnerabilities; #####

(C)developing a cyber threat model; and #####

(D)completing a comprehensive, strategic policy framework to identify and mitigate cybersecurity risks to the air traffic control system. ####

(3)In 2018, Congress passed the FAA Reauthorization Act of 2018 which— #####

(A)authorized funding for the construction of FAA facilities dedicated to improving the cybersecurity of the national airspace system; #####

(B)required the FAA to review and update its comprehensive, strategic policy framework for cybersecurity to assess the degree to which the framework identifies and addresses known cybersecurity risks associated with the aviation system, and evaluate existing short- and long-term objectives for addressing cybersecurity risks to the national airspace system; #####

(C)created a Chief Technology Officer position within the FAA to be responsible for, among other things, coordinating the implementation, operation, maintenance, and cybersecurity of technology programs relating to the air traffic control system with the aviation industry and other Federal agencies; and #####

(D)directed the National Academy of Sciences to study the cybersecurity workforce of the FAA in order to develop recommendations to increase the size, quality, and diversity of such workforce. ####

(4)Congress has declared that the FAA is the primary Federal agency to assess and address the threats posed from cyber incidents relating to FAA-provided air traffic control and air navigation services and the threats posed from cyber incidents relating to civil aircraft, aeronautical products and articles, aviation networks, aviation systems, services, and operations, and the aerospace industry affecting aviation safety or the provision of safe, secure, and efficient air navigation services and airspace management by the Administration.