3
(a) "Space System" means a combination of systems, to
include ground systems, sensor networks, and one or more space
vehicles, that provides a space-based service. A space system
typically has three segments: a ground control network, a space
vehicle, and a user or mission network. These systems include
Government national security space systems, Government civil
space systems, and private space systems.
(b) "Space Vehicle" means the portion of a space system
that operates in space. Examples include satellites, space
stations, launch vehicles, launch vehicle upper stage
components, and spacecraft.
(c) "Positive Control" means the assurance that a space
vehicle will only execute commands transmitted by an authorized
source and that those commands are executed in the proper order
and at the intended time.
(d) "Critical space vehicle functions (critical
functions)" means the functions of the vehicle that the operator
must maintain to ensure intended operations, positive control,
and retention of custody. The failure or compromise of critical
space vehicle functions could result in the space vehicle not
responding to authorized commands, loss of critical capability,
or responding to unauthorized commands.
Sec. 3. Policy. Cybersecurity principles and practices
that apply to terrestrial systems also apply to space systems.
Certain principles and practices, however, are particularly
important to space systems. For example, it is critical that
cybersecurity measures, including the ability to perform updates
and respond to incidents remotely, are integrated into the
design of the space vehicle before launch, as most space
vehicles in orbit cannot currently be physically accessed.
For this reason, integrating cybersecurity into all phases of
development and ensuring full life-cycle cybersecurity are
critical for space systems. Effective cybersecurity practices
arise out of cultures of prevention, active defense, risk
management, and sharing best practices.
The United States must manage risks to the growth and
prosperity of our commercial space economy. To do so and to
strengthen national resilience, it is the policy of the
United States that executive departments and agencies (agencies)
will foster practices within Government space operations and
across the commercial space industry that protect space assets