; (D) received training in threat and error management, facilitation, and risk mitigation determined appropriate by the Administrator; and (E) meets any other requirement determined appropriate by the Administrator. B Aviation Cybersecurity 391. Findings Congress finds the following: (1) Congress has tasked the FAA with responsibility for securing the national airspace system, including the air traffic control system and other air navigation services, civil aircraft, and aeronautical products and articles through safety regulation and oversight. These mandates have included protecting against cyber threats affecting aviation safety or the Administration’s provision of safe, secure, and efficient air navigation services and airspace management. (2) In 2016, Congress passed the FAA Extension, Safety, and Security Act of 2016, pursuant to which the FAA enhanced the cybersecurity of the national airspace system by— (A) developing a cybersecurity strategic plan; (B) coordinating with other Federal agencies to identify cyber vulnerabilities; (C) developing a cyber threat model; and (D) completing a comprehensive, strategic policy framework to identify and mitigate cybersecurity risks to the air traffic control system. (3) In 2018, Congress passed the FAA Reauthorization Act of 2018 which— (A) authorized funding for the construction of FAA facilities dedicated to improving the cybersecurity of the national airspace system; (B) required the FAA to review and update its comprehensive, strategic policy framework for cybersecurity to assess the degree to which the framework identifies and addresses known cybersecurity risks associated with the aviation system, and evaluate existing short- and long-term objectives for addressing cybersecurity risks to the national airspace system