AIRCRAFT AVIONICS SYSTEMS.

SEC. 506. [49 U.S.C. 44704 note] SECURING AIRCRAFT AVIONICS SYSTEMS. (a) In General.—The Administrator shall revise, as appropriate, existing Federal Aviation Administration regulations regarding airworthiness certification— (1) to address cybersecurity for avionics systems, including software components; (2) to require that aircraft avionics systems used for flight guidance or aircraft control be secured against unauthorized access via passenger in-flight entertainment systems through such means as the Administrator determines appropriate to protect the avionics systems from unauthorized external and internal access; and (3) to establish a process and timeline by which software-based systems and equipment, including aircraft flight critical systems of aircraft operated under part 121 of title 14, Code of Federal Regulations, can be regularly screened to attempt to determine whether the software-based systems and equipment have been compromised by unauthorized external or internal access. (b) Consideration.—In carrying out subsection (a), the Administrator shall consider the recommendations of the Aircraft Systems Information Security Protection Working Group under section 2111 of the FAA Extension Safety and Security Act of 2016 (Public Law 114-190; 130 Stat. 615).