; (C) has a maintenance facility with a maintenance certificate issued under part 145 of such title; and (D) certifies annually to the Administrator that the airport intends to continue participating in the pilot program; (2) the operator of the Stage 2 airplane operates not more than 10 flights per month using that airplane; and (3) revenue flights will be limited to flights transporting specific and necessary equipment to maintain or improve the vital industry of small rural communities. (b) Termination The regulations required by subsection (a) shall terminate on the earlier of— (1) the date that is 10 years after the date of the enactment of the Act; or (2) the date on which the Administrator determines that no Stage 2 airplane remain in service. (c) Definitions In this section: (1) Medium hub airport; nonhub aiport The terms medium hub airport and nonhub airport have the meanings given those terms in section 40102 of the title 49, United States Code. (2) Stage 2 airplane The term Stage 2 airplane has the meaning given that term in section 91.851 of title 14, Code of Federal Regulations (as in effect on the day before the date of the enactment of this Act). V Miscellaneous 501. Review of FAA strategic cybersecurity plan (a) In general Not later than 1 year after the date of enactment of this Act, the Administrator of the Federal Aviation Administration shall initiate a review of the comprehensive and strategic framework of principles and policies (referred to in this section as the framework ) developed pursuant to section 2111 of the FAA Extension, Safety, and Security Act of 2016 ( 49 U.S.C. 44903 note). (b) Contents In undertaking the review under subsection (a), the Administrator shall— (1) assess the degree to which the framework identifies and addresses known cybersecurity risks associated with the aviation system; (2) review existing short- and long-term objectives for addressing cybersecurity risks to the national airspace system