Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 8441 (Initial Public Draft)

Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN)

Date Published: June 6, 2023
Comments Due: July 14, 2023 (public comment period is CLOSED)
Email Questions to:


James McCarthy (NIST), Dan Mamula (MITRE), Joseph Brule (MITRE), Karri Meldorf (MITRE), Rory Jennings (MITRE), John Wiltberger (MITRE), Chris Thorpe (MITRE), John Dombrowski (MITRE), O'Ryan Lattin (MITRE)


The HSN Cybersecurity Framework (CSF) Profile, informed by an active community of interested stakeholders, provides a practical tool for organizations engaged in the design, acquisition, and operation of satellite buses or payloads involving HSN. Its primary intent is to help those organizations better understand the attack surface, incorporate security, and achieve greater resilience for space systems that may be leveraged by critical infrastructure owners and operators, the DoD, or other government missions, in a manner that is consistent with the sponsor organization’s risk tolerance.

The HSN Profile will help organizations:

  • Identify systems, assets, data, and risks from the CSF that pertain to HSN.
  • Protect HSN services by utilizing cybersecurity principles and self-assessment.
  • Detect cybersecurity-related disturbances or corruption of HSN services and data.
  • Respond to HSN service or data anomalies in a timely, effective, and resilient manner.
  • Recover the HSN to proper working order at the conclusion of a cybersecurity incident.

As the space sector is transitioning away from traditional vertically integrated entities and towards an aggregation of independently-owned and operated segments, it is becoming more critical for all stakeholders to share a common understanding of the risks and how they can be mitigated. We appreciate your help. If you have expertise in Commercial Space capabilities, please help shape this important Profile.

We encourage you to use this comment template when preparing/providing your comments.  

NOTE: A call for patent claims is included on page ii of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy – Inclusion of Patents in ITL Publications.



Cybersecurity Framework; Hybrid satellite networks; HSN; payload; shared services; hosted payload; virtual payload command center; PCC
Control Families

None selected


Download URL

Supplemental Material:
Comment template (xlsx)
Project homepage

Document History:
07/12/22: CSWP 27 (Draft)
11/03/22: CSWP 27 (Final)
06/06/23: IR 8441 (Draft)
09/25/23: IR 8441 (Final)