The Satellite Cybersecurity Act requires the federal government to take a closer look at how it's protecting commercial satellites from cyber attacks. Right now, private companies own and operate satellites that handle everything from communications to GPS services, and these systems can be vulnerable to hacking and other digital threats. This bill asks the government to study what it's already doing to help protect these satellites and then report back to Congress with recommendations.

Within six months, the government must create a public online clearinghouse—basically a one-stop shop—where satellite companies can find cybersecurity guidance and best practices. This resource will include recommendations on topics like protecting against hacking, jamming, and supply chain risks, with special materials designed to help small businesses secure their satellite operations. The government will also coordinate across multiple agencies (like NASA, the Department of Defense, and the FCC) to make sure everyone's working together on satellite security rather than duplicating efforts.

Within two years, a government auditor must complete a comprehensive study examining how much the federal government relies on commercial satellites, how foreign ownership of satellites might create security risks, and what resources are available to help companies protect themselves. The bill essentially acknowledges that satellites are becoming critical to how America operates—from military communications to weather forecasting to financial systems—and the government needs a better strategy to keep them safe from cyber threats.

Satellite Cybersecurity Act

Peters, Gary C.

Satellite Cybersecurity Act This bill requires the dissemination of information and other activities to address cybersecurity risks to commercial satellite systems. Specifically, the Cybersecurity and Infrastructure Security Agency (CISA) must (1) maintain a publicly available clearinghouse of resources concerning the cybersecurity of commercial satellite systems; and (2) consolidate voluntary recommendations for developing, maintaining, and operating those systems, including recommendations for protecting systems against cyber-related risks and attacks. To the extent practicable, CISA must implement these activities as a public-private partnership. In addition, the National Space Council and the White House Office of the National Cyber Director must develop a national strategy for addressing and improving the cybersecurity of commercial satellite systems. Further, the Government Accountability Office must report on federal actions to support and improve the cybersecurity of commercial satellite systems, including actions taken to address the cybersecurity of critical infrastructure sectors. The report must cover, among other topics, the effectiveness of those actions and the reliance of federal agencies on commercial satellite systems (particularly those with ties to foreign countries).