; and (2) an explanation of why any such recommendations are not incorporated in the plan or are not incorporated within such timeframes. 35. Cybersecurity research coordination The Administrator shall, where feasible, cooperate on cybersecurity research and development with other international air traffic management organizations, including the European Aviation Safety Agency, the United Kingdom Civil Aviation Authority, Nav Canada, and Air­ser­vices Australia. 36. Cybersecurity research and development program (a) Establishment Not later than 6 months after the date of enactment of this Act, the FAA, in consultation with other agencies as appropriate, shall establish a research and development program to improve the cybersecurity of civil aircraft and the national airspace system. (b) Plan (1) In general Not later than 1 year after the date of enactment of this Act, the FAA shall develop a plan for the research and development program established under subsection (a) that contains objectives, proposed tasks, milestones, and a 5-year budgetary profile. (2) National Academies’ study The Administrator shall— (A) enter into an arrangement with the National Academies for a study of the plan developed under paragraph (1)