; (4) how aircraft and ground systems cybersecurity vulnerabilities are being identified and prioritized for mitigation, particularly considering the commercial technology ecosystem; and (5) the budgets of the parties responsible for implementing the strategy framework for aviation security, as identified in subsection (a), to satisfy those mitigation requirements necessary to secure the aviation ecosystem from onboard cybersecurity vulnerabilities. (c) Report required Not later than 1 year after the date of the enactment of this section, the Comptroller General shall submit a report containing the results of the review required by this section to— (1) the appropriate committees of Congress; (2) the Committee on Homeland Security of the House of Representatives; and (3) the Committee on Homeland Security and Government Affairs of the Senate. 332. Securing aircraft avionics systems Section 506(a) of the FAA Reauthorization Act of 2018 ( 42 U.S.C. 44704 note) is amended— (1) in the matter preceding paragraph (1), by striking consider, where appropriate, revising and inserting revise, where appropriate, existing ; (2) in paragraph (1), by striking and after the semicolon; (3) in paragraph (2), by striking the period at the end and inserting ; and ; and (4) by adding at the end the following: (3) to require that software-based systems and equipment, including aircraft flight critical systems, be verified to ensure the software-based systems and equipment have not been compromised by unauthorized external and internal access. . 333. Maintenance data availability (a) In general The Administrator shall assign to the Aviation Rulemaking Advisory Committee the task of— (1) performing a comprehensive review of previous and current FAA regulations and related internal and external guidance material related to instructions for continued airworthiness (in this section referred to as ICA )