Spacecraft Cybersecurity Act

This bill requires NASA to update its acquisition policies for space systems and services to include stronger cybersecurity controls, directly affecting NASA and its contractors who develop or manage spacecraft. It mandates an implementation plan within 270 days, including specific milestones, regular cybersecurity policy reviews, and resource estimates. The plan must align with existing federal guidance (Space Policy Directive-5) and address gaps identified in a 2024 GAO audit. NASA must also brief relevant congressional committees within 30 days of completing the plan. The focus is on updating existing policy frameworks, not creating new technology or funding.