NSF to map cybersecurity upgrades for U.S. oceanographic research fleet

What it does

This bill requires the National Science Foundation Director to develop a comprehensive plan within one year to upgrade cybersecurity and telecommunications systems on U.S. oceanographic research vessels operated by universities. The plan must assess current needs, costs, implementation timelines, and funding sources—drawing on expertise from federal cybersecurity agencies—to enable remote research operations, real-time data transmission, and secure communications for these scientific vessels.

Why we flagged it

The bill's operative mechanism is a directive to the NSF Director to produce a strategic plan for upgrading cybersecurity and telecommunications on federally-funded oceanographic research vessels. It is a planning mandate, not an appropriation or regulatory change.

What the text implies

• The plan may recommend centralized cybersecurity management across the fleet, potentially concentrating data governance at a single NSF facility and creating a single point of failure for fleet-wide security.
• Requirement to consult with CISA and NIST may lead to adoption of classified-information handling protocols on civilian research vessels, potentially restricting data access or publication of oceanographic findings.
• The bill contemplates funding from 'non-Federal owners' and 'users' of vessels, which may shift costs to private research institutions or commercial partners without explicit appropriation authority.

Section numbers refer to the bill text the analysis read — linked under Primary records below.

Who it affects

The bill mandates a planning process to strengthen cybersecurity and communications infrastructure for publicly-funded academic research vessels, improving data security and enabling remote scientific collaboration without creating new restrictions on citizens or private giveaways. The primary beneficiary is the public interest in robust, secure oceanographic research.

Who stands to gain

• satellite communications equipment manufacturers
• cybersecurity software vendors
• high-performance computing hardware suppliers
• telecommunications infrastructure providers

Named in the bill

National Science Foundation (NSF), Director of NSF, Cybersecurity and Infrastructure Security Agency (CISA), National Institute of Standards and Technology (NIST), Office of Naval Research, University-National Oceanographic Laboratory System (UNOLS), U.S. Academic Research Fleet, Senate Committee on Commerce, Science, and Transportation, House Committee on Science, Space, and Technology

Where it stands

1 cosponsor: 1 Republicans.

• Jan 29, 2025 — Introduced · Congress.gov: “Introduced in Senate”
• Jan 29, 2025 — Referred to Senate Committee on Commerce, Science, and Transportation · Congress.gov: “Read twice and referred to the Committee on Commerce, Science, and Transportation”
• May 21, 2025 — Reported out of committee · Congress.gov: “Committee on Commerce, Science, and Transportation. Ordered to be reported with an amendment in the nature of…”
• Oct 8, 2025 — Passed the Senate · Congress.gov: “Passed Senate with an amendment by Unanimous Consent. (consideration: CR S7007-7009; text: CR S7008-7009)”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

Money around this bill

1 lobbying clients named this bill on 1 disclosure filings across 1 quarter, Dec 2025 to Dec 2025. Those filings disclosed $450,000 in lobbying spend. A filing names 24 bills on average, so that figure is what each filing reported, not a share belonging to this bill.

More lobbying clients named this bill than 0% of bills with at least one filing.

Alex Padilla, the sponsor, reported $176,500 in PAC receipts in the 2026 cycle.

• University of California — $450,000 on 1 filing

Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.