10 U.S.C. § 2279: Foreign commercial satellite services and foreign launches

the foreign entity is an entity in which the government of a covered foreign country has an ownership interest that enables that government to affect satellite operations; the foreign entity plans to or is expected to provide satellite services under the contract from a covered foreign country; or entering into such contract would create an unacceptable cybersecurity risk for the Department of Defense. designed or manufactured in a covered foreign country, or by an entity controlled in whole or in part by, or acting on behalf of, the government of a covered foreign country; or launched using a launch vehicle that is designed or manufactured in a covered foreign country, or that is provided by the government of a covered foreign country or by an entity controlled in whole or in part by, or acting on behalf of, the government of a covered foreign country, regardless of the location of the launch (unless such location is in the United States). a launch that occurs prior to December 31, 2022 ; or a contract or other agreement relating to launch services that, prior to the date that is 180 days after the date of the enactment of this subsection, was either fully paid for by the contractor or covered by a legally binding commitment of the contractor to pay for such services. In this subsection, the term “launch vehicle” means a fully integrated space launch vehicle. the Secretary determines it is in the national security of the United States to enter into such contract; and The projected period of performance (including any period covered by options to extend the contract), the financial terms, and a description of the services to be provided under the contract. To the extent practicable, a description of the ownership interest that a covered foreign country has in the foreign entity providing satellite services to the Department of Defense under the contract and the launch or other satellite services that will be provided in a covered foreign country under the contract. A justification for entering into a contract with such foreign entity and a description of the actions necessary to eliminate the need to enter into such a contract with such foreign entity in the future. A risk assessment of entering into a contract with such foreign entity, including an assessment of mission assurance and security of information and a description of any measures necessary to mitigate risks found by such risk assessment. The Secretary of Defense may only delegate the authority under subsection (c) to enter into a contract subject to the prohibition under subsection (a) or (b) to the Deputy Secretary of Defense, the Under Secretary of Defense for Policy, or the Under Secretary of Defense for Acquisition and Sustainment and such authority may not be further delegated. Each assessment under subsection (c) shall be submitted in unclassified form, but may include a classified annex. A country described in section 1261(c)(2) of the National Defense Authorization Act for Fiscal Year 2013 ( Public Law 112–239 ; 126 Stat. 2019 ). The Russian Federation. The term “cybersecurity risk” means threats to and vulnerabilities of information or information systems and any related consequences caused by or resulting from unauthorized access, use, disclosure, degradation, disruption, modification, or destruction of such information or information systems, including such related consequences caused by an act of terrorism.