Cybersecurity Policy Report, Aviation Sector Could Face New Cyber Rules Under FAA Reauthorization Bill, (May 3, 2024)
Organizations Mentioned:Federal Aviation Administration
The aviation sector could face new cybersecurity rules under Federal Aviation Administration reauthorization legislation due to be considered by the Senate next week.
The Securing Growth and Robust Leadership in American Aviation Act (HR 3935) would direct the FAA to convene an “aviation rulemaking committee on civil aircraft cybersecurity” that would “develop findings and recommendations on cybersecurity standards for civil aircraft, aircraft ground support information systems, airports, air traffic control mission systems, and aeronautical products and articles,” according to an amended version of the bill that the Senate will consider.
The rulemaking committee would consider, among other things, “existing aviation cybersecurity standards, regulations, policies, and guidance, including those from other Federal agencies, and the need to harmonize or deconflict proposed and existing standards, regulations, policies, and guidance,” the bill says.
It also would look at “threat- and risk-based security approaches used by the aviation industry, including the assessment of the potential costs and benefits of cybersecurity actions” and “appropriate cybersecurity controls for aircraft networks, aircraft systems, and aeronautical products and articles to protect aviation safety, including airworthiness,” according to the legislation.
The cybersecurity provisions also were included in the version of HR 3935 adopted by the House last year. On Tuesday, the Senate will begin consideration of its version, which was released this week by leaders of the Senate Commerce, Science, and Transportation Committee following talks with leaders of the House Transportation and Infrastructure Committee.
“The FAA Reauthorization Act of 2024 is the culmination of months of work between House and Senate committee leaders, and we look forward to moving this agreement through both chambers as expeditiously as possible,” the committees said in a joint statement.
MainStory: TopStory FederalLegislation DataSecurity