; and (E) may contain controlled unclassified information distributed to commercial entities through a process determined appropriate by the Director. (3) Content maintenance The Director shall maintain current and relevant cybersecurity information on the clearinghouse. (4) Existing platform or website To the extent practicable, the Director shall establish and maintain the clearinghouse using an online platform, a website, or a capability in existence as of the date of enactment of this Act. (c) Consolidation of commercial satellite system cybersecurity recommendations (1) In general The Director shall consolidate voluntary cybersecurity recommendations designed to assist in the development, maintenance, and operation of commercial satellite systems. (2) Requirements The recommendations consolidated under paragraph (1) shall include materials appropriate for a public resource addressing, to the greatest extent practicable, the following: (A) Risk-based, cybersecurity-informed engineering, including continuous monitoring and resiliency. (B) Planning for retention or recovery of positive control of commercial satellite systems in the event of a cybersecurity incident. (C) Protection against unauthorized access to vital commercial satellite system functions. (D) Physical protection measures designed to reduce the vulnerabilities of a commercial satellite system’s command, control, and telemetry receiver systems. (E) Protection against jamming, eavesdropping, hijacking, computer network exploitation, spoofing, threats to optical satellite communications, and electromagnetic pulse. (F) Security against threats throughout a commercial satellite system’s mission lifetime. (G) Management of supply chain risks that affect the cybersecurity of commercial satellite systems. (H) Protection against vulnerabilities posed by ownership of commercial satellite systems or commercial satellite system companies by foreign entities. (I) Protection against vulnerabilities posed by locating physical infrastructure, such as satellite