; (13) appropriate cybersecurity controls for airports relative to the size and nature of airside operations of such airports to ensure aviation safety; (14) minimum standards for protecting civil aircraft, aeronautical products and articles, aviation networks, aviation systems, services, and operations from cyber threats and cyber incidents; (15) international collaboration, where appropriate and consistent with the interests of aviation safety in air commerce and national security, with other civil aviation authorities, international aviation and standards organizations, and any other appropriate entities to protect civil aviation from cyber incidents and cyber threats; (16) activities of the Administrator under section 506 of the FAA Reauthorization Act of 2018 ( 49 U.S.C. 44704 note) (as amended by section 394); and (17) any other matter the Administrator determines appropriate. (h) Definitions The definitions set forth in section 40131 of title 49, United States Code (as added by this subtitle), shall apply to this section. 396. GAO report on cybersecurity of commercial aviation avionics (a) In general The Comptroller General shall conduct a review on the consideration, identification, and inclusion of aircraft cybersecurity into the strategic framework of principles and policies developed pursuant to section 2111 of the FAA Extension, Safety, and Security Act of 2016 ( 49 U.S.C. 44903 note). (b) Contents In carrying out the review under subsection (a), the Comptroller General shall assess— (1) how onboard aircraft cybersecurity risks and vulnerabilities are defined, identified, and accounted for in the comprehensive and strategic framework described in subsection (a), including how the implementation of such framework protects and defends FAA networks and systems to mitigate risks to FAA missions and service delivery