REVIEW OF FAA STRATEGIC CYBERSECURITY PLAN.

SEC. 509. [49 U.S.C. 44903 note] REVIEW OF FAA STRATEGIC CYBERSECURITY PLAN. (a) In General.—Not later than 1 year after the date of enactment of this Act, the Administrator shall initiate a review of the comprehensive and strategic framework of principles and policies (referred to in this section as the “framework”) developed pursuant to section 2111 of the FAA Extension, Safety, and Security Act of 2016 (49 U.S.C. 44903 note). (b) Contents.—In undertaking the review under subsection (a), the Administrator shall— (1) assess the degree to which the framework identifies and addresses known cybersecurity risks associated with the aviation system; (2) review existing short- and long-term objectives for addressing cybersecurity risks to the national airspace system; and (3) assess the Administration’s level of engagement and coordination with aviation stakeholders and other appropriate agencies, organizations, or groups with which the Administration consults to carry out the framework. (c) Updates.—Upon completion of the review under subsection (a), the Administrator shall modify the framework, as appropriate, to address any deficiencies identified by the review. (d) Report to Congress.—Not later than 180 days after initiating the review required by subsection (a), the Administrator shall submit to the appropriate committees of Congress a report on the results of the review, including a description of any modifications made to the framework.