Enhancing Satellite Cybersecurity Act
Bill: S.4123 | Sponsor: Sen. Ossoff, Jon (D-GA)
Policy area: Science, Technology, Communications

Summary:
Enhancing Satellite Cybersecurity Act
This bill addresses cybersecurity matters related to commercial satellite systems that are owned or controlled by foreign entities or that have physical structures in foreign countries.
Specifically, the Cybersecurity and Infrastructure Security Agency must consolidate voluntary recommendations for the development, maintenance, and operation of commercial satellite systems. The recommendations must include measures to protect systems against cyber-related vulnerabilities posed by foreign ownership or physical infrastructure that is located in foreign countries.
The bill also requires the Government Accountability Office to study and report on federal actions to support the cybersecurity of commercial satellite systems. In particular, the report must address the extent to which federal agencies rely on foreign systems or systems with physical structures in foreign countries.

To require a report on Federal support of the cybersecurity of 
         commercial satellite systems, and for other purposes.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE.

    This Act may be cited as the ``Enhancing Satellite Cybersecurity 
Act''.

SEC. 2. DEFINITION.

    In this Act, the term ``commercial satellite system'' means an 
earth satellite owned and operated by a non-Federal entity.

SEC. 3. REPORT ON COMMERCIAL SATELLITE CYBERSECURITY.

    Not later than 2 years after the date of enactment of this Act, the 
Comptroller General of the United States shall report to Congress on 
the actions the Federal Government has taken to support the 
cybersecurity of commercial satellite systems, which shall include 
information on--
            (1) the extent to which Federal agencies are reliant on 
        commercial satellite systems owned wholly or in part or 
        controlled by foreign entities, and how Federal agencies 
        mitigate associated cybersecurity risks; and
            (2) the extent to which Federal agencies are reliant on 
        commercial satellite systems with physical structures, such as 
        satellite ground control systems, in foreign countries, and how 
        Federal agencies mitigate associated cybersecurity risks.

SEC. 4. RESPONSIBILITIES OF THE CYBERSECURITY AND INFRASTRUCTURE 
              SECURITY AGENCY.

    (a) In General.--The Director of the Cybersecurity and 
Infrastructure Security Agency shall consolidate voluntary 
cybersecurity recommendations designed to assist in the development, 
maintenance, and operation of commercial satellite systems.
    (b) Requirements.--The recommendations consolidated under 
subsection (a) shall include, to the greatest extent practicable, 
materials addressing the following:
            (1) Protection against vulnerabilities posed by ownership 
        of commercial satellite systems or commercial satellite system 
        companies by foreign entities.
            (2) Protection against vulnerabilities posed by locating 
        physical infrastructure, such as satellite ground control 
        systems, in foreign countries.
                                 <all>