49 U.S.C. § 40131 — National airspace system cyber threat management process

monitor the national airspace system for significant cybersecurity incidents;

in consultation with appropriate Federal agencies, evaluate the cyber threat landscape for the national airspace system, including updating such evaluation on both annual and threat-based timelines;

conduct national airspace system cyber incident analyses;

create a cyber common operating picture for the national airspace system cyber environment;

coordinate national airspace system significant cyber incident responses with other appropriate Federal agencies;

track significant cyber incident detection, response, mitigation implementation, recovery, and closure;

establish a process, or utilize existing processes, to share relevant significant cyber incident data related to the national airspace system;

facilitate significant cybersecurity reporting, including through the Cybersecurity and Infrastructure Agency; and

consider any other matter the Administrator determines appropriate.

The term “cyber common operating picture” means the correlation of a detected cyber incident or cyber threat in the national airspace system and other operational anomalies to provide a holistic view of potential cause and impact.

The term “cyber environment” means the information environment consisting of the interdependent networks of information technology infrastructures and resident data, including the internet, telecommunications networks, computer systems, and embedded processors and controllers.

The term “cyber incident” means an action that creates noticeable degradation, disruption, or destruction to the cyber environment and causes a safety or other negative impact on operations of—

The term “cyber threat” means the threat of an action that, if carried out, would constitute a cyber incident or an electronic attack.

The term “electronic attack” means the use of electromagnetic spectrum energy to impede operations in the cyber environment, including through techniques such as jamming or spoofing.

The term “significant cyber incident” means a cyber incident, or a group of related cyber incidents, that the Administrator determines is likely to result in demonstrable harm to the national airspace system of the United States.