To secure aircraft avionics systems.

SA 3621. Mr. NELSON submitted an amendment intended to be proposed to
amendment SA 3464 submitted by Mr. Thune (for himself and Mr. Nelson)
to the bill H.R. 636, to amend the Internal Revenue Code of 1986 to
permanently extend increased expensing limitations, and for other
purposes; as follows:

At the appropriate place, insert the following:

SEC. ____. SECURING AIRCRAFT AVIONICS SYSTEMS.

(a) In General.--The Administrator of the Federal Aviation
Administration shall consider revising Federal Aviation
Administration regulations regarding airworthiness
certification--
(1) to address cybersecurity for avionics systems,
including software components; and
(2) to require that aircraft avionics systems used for
flight guidance or aircraft control be secured against
unauthorized access via passenger in-flight entertainment
systems through such means as the Administrator determines
appropriate to protect the avionics systems from unauthorized
external and internal access.
(b) Consideration.--The Administrator's consideration and
any action taken under subsection (a) shall be in accordance
with the recommendations of the Aircraft Systems Information
Security Protection Working Group under section 5029(d) of
this Act.
On page 354, between lines 16 and 17, insert the following:
(3) In-flight entertainment systems review.--As part of its
review under subparagraphs (A) and (B) of paragraph (2), the
working group shall review the cybersecurity risks of in-
flight entertainment systems to consider whether such systems
can and should be isolated and separate from systems required
for safe flight and operations, including reviewing standards
for air gaps or other means determined appropriate.
On page 354, line 17, strike ``(3)'' and insert ``(4)''.
On page 354, line 23, strike ``(4)'' and insert ``(5)''.
On page 355, line 9, strike ``(5)'' and insert ``(6)''.
______