# Plain Language Summary: Satellite Cybersecurity Act

This bill addresses a growing vulnerability in modern technology: the security of commercial satellites. Satellites are increasingly important to everyday life—they handle everything from GPS navigation and weather forecasting to internet service and financial transactions. The problem is that these satellites can be hacked just like any other computer system, and right now there's no coordinated government effort to help companies protect them. This bill creates two main solutions to fix that problem.

First, the bill requires a comprehensive study to figure out what the federal government is currently doing (or not doing) to help protect commercial satellites from cyberattacks. The Government Accountability Office will spend two years investigating how effective federal efforts have been, what resources are available to companies, and whether different government agencies are duplicating work or leaving gaps. They'll report back to Congress within two years with their findings. This study is meant to answer a basic question: do we even know what we're doing to protect these critical systems?

Second, the bill creates a public online clearinghouse—essentially a one-stop resource center—run by the Cybersecurity and Infrastructure Security Agency (CISA). This clearinghouse will gather best practices and security recommendations from government agencies and private companies in one accessible place. Companies building or operating satellites can go there to find guidance on protecting their systems against hacking, jamming, and other cyber threats. The clearinghouse will include special resources for small satellite companies that might not have large cybersecurity teams. The goal is straightforward: make it easier for the private sector to build satellites securely by giving them clear, practical guidance on what works.

Satellite Cybersecurity Act

Malinowski, Tom

Satellite Cybersecurity Act This bill addresses cybersecurity matters related to commercial satellite systems. Specifically, the Cybersecurity and Infrastructure Security Agency (CISA) must maintain a publicly available clearinghouse of resources concerning the cybersecurity of commercial satellite systems. CISA must also consolidate voluntary recommendations for the development, maintenance, and operation of such systems. The recommendations must include measures to protect systems against cyber-related vulnerabilities, risks, and attacks. The bill also requires the Government Accountability Office (GAO) to study and report on federal actions to support the cybersecurity of commercial satellite systems, including with respect to critical infrastructure sectors. In carrying out its study and report, the GAO must coordinate with designated federal agencies.