; (2) in paragraph (1) by striking and at the end; (3) in paragraph (2) by striking the period at the end and inserting ; and ; and (4) by adding at the end the following: (3) to establish a process and timeline by which software-based systems and equipment, including aircraft flight critical systems of aircraft operated under part 121 of title 14, Code of Federal Regulations, can be regularly screened to attempt to determine whether the software-based systems and equipment have been compromised by unauthorized external or internal access. . 395. Civil aviation cybersecurity rulemaking committee (a) In general Not later than 1 year after the date of enactment of this Act, the Administrator shall convene an aviation rulemaking committee on civil aircraft cybersecurity to conduct reviews (as segmented under subsection (c)) and develop findings and recommendations on cybersecurity standards for civil aircraft, aircraft ground support information systems, airports, air traffic control mission systems, and aeronautical products and articles. (b) Duties The Administrator shall— (1) for each segmented review conducted by the committee convened under subsection (a), submit to the appropriate committees of Congress a report based on the findings of such review; and (2) not later than 180 days after the date of submission of a report under paragraph (1) and, in consultation with other agencies as the Administrator determines necessary, for consensus recommendations reached by such aviation rulemaking committee— (A) undertake a rulemaking, if appropriate, based on such recommendations