; (2) how onboard aircraft cybersecurity, particularly of aircraft avionics, is considered, incorporated, and prioritized for mitigation in the cybersecurity strategy, including pursuant to the framework described in paragraph (1); (3) how the Transportation Security Agency and FAA differentiate and manage the roles and responsibilities for the cybersecurity of aircraft and ground systems; (4) how cybersecurity vulnerabilities of aircraft and ground systems are considered, incorporated, and prioritized for mitigation in the cybersecurity strategy; and (5) the budgets of the parties responsible for implementing the strategy framework for aviation security, as identified in subsection (a), to satisfy mitigation requirements necessary to secure the aviation ecosystem from onboard cybersecurity vulnerabilities. (c) Report required Not later than 2 years after the date of the enactment of this Act, the Comptroller General shall submit a report containing the results of the review required by this section to— (1) the appropriate committees of Congress; (2) the Committee on Homeland Security of the House of Representatives