The NCCoE has published for comment Draft NIST IR 8441, Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN).
The public comment period for this draft is now open until 11:59 p.m. ET on July 5 July 14, 2023.
- View the publication.
- Visit the project page.
- Email questions to hsn_nccoe@nist.gov.
All comments that are received will be reviewed and adjudicated to inform the final publication.
The HSN Cybersecurity Framework (CSF) Profile, informed by an active community of interested stakeholders, provides a practical tool for organizations engaged in the design, acquisition, and operation of satellite buses or payloads involving HSN. Its primary intent is to help those organizations better understand the attack surface, incorporate security, and achieve greater resilience for space systems that may be leveraged by critical infrastructure owners and operators, the DoD, or other government missions, in a manner that is consistent with the sponsor organization’s risk tolerance.
The HSN Profile will help organizations:
- Identify systems, assets, data, and risks from the CSF that pertain to HSN.
- Protect HSN services by utilizing cybersecurity principles and self-assessment.
- Detect cybersecurity-related disturbances or corruption of HSN services and data.
- Respond to HSN service or data anomalies in a timely, effective, and resilient manner.
- Recover the HSN to proper working order at the conclusion of a cybersecurity incident.
As the space sector is transitioning away from traditional vertically integrated entities and towards an aggregation of independently-owned and operated segments, it is becoming more critical for all stakeholders to share a common understanding of the risks and how they can be mitigated. We appreciate your help. If you have expertise in Commercial Space capabilities, please help shape this important Profile.
The public comment period is open through July 5 July 14, 2023. See the publication details for a copy of the draft and instructions for submitting comments.
NOTE: A call for patent claims is included on page ii of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy – Inclusion of Patents in ITL Publications.
