NEW HORIZON Act

This Act may be cited as the Nodes, Enterprise Workloads, and Hybrid Operations, Resilience, Integration, Zero-Trust, Orbital Networks Act or the NEW HORIZON Act.
Congress makes the following findings:
Modern national security space missions generate increasing volumes of data from space-based sensors, platforms, and constellations, placing growing demands on terrestrial data transport, processing, and analysis infrastructure.
Reliance on ground-based data processing can introduce latency, bandwidth constraints, and vulnerabilities that may degrade the timeliness, resilience, and effectiveness of military and intelligence operations in contested environments.
Commercial industry is developing orbital data center and space-based cloud computing capabilities that enable in-space data processing, storage, and analytics, which may reduce latency, enhance resilience, and improve mission outcomes.
The Department of Defense has identified the need for hybrid architectures that integrate space, terrestrial, and commercial capabilities to support joint and national security missions.
An operational pilot program is necessary to evaluate the military utility, operational integration, and transition potential of orbital data center services through real-world mission use cases before any broader adoption or sustained acquisition.
Maintaining a competitive and resilient domestic industrial base for orbital infrastructure, including satellite platforms, communications systems, and in-space computing capabilities, is important to accelerating innovation and supporting operational resilience.
Not later than 1 year after the date of the enactment of this Act, the Secretary of Defense (referred to in this Act as the Secretary), acting through the Director of the Defense Innovation Unit, shall carry out an operational pilot program under the Hybrid Space Architecture initiative to evaluate the use of commercially available orbital data center services and space-based cloud computing capabilities relevant to national security space and joint mission requirements.
The purposes of the pilot program shall be—
to assess the military utility of orbital data center and space-based cloud computing services;
to evaluate the operational integration of such services into existing and planned Department of Defense space and joint architectures;
to examine the resilience, latency, security, and mission assurance benefits of in-space data processing;
to inform the potential transition of such services into sustained programs of record or operational use;
to evaluate concepts of operations for the protection and defense of orbital data center assets against kinetic, nonkinetic, and cyber threats;
to assess the asset protection strategies and vulnerabilities of orbital data center infrastructure; and
to evaluate the integration and operational performance of interoperable, commercially provided orbital infrastructure components sourced from multiple vendors across the hybrid space architecture ecosystem.
In carrying out the pilot program, the Secretary may—
employ commercially available orbital data center services in support of real-world mission scenarios, including intelligence, space domain awareness, command and control, data transport, and other national security applications;
conduct testing, demonstration, and limited operational employment necessary to assess technical performance and operational viability; and
support integration activities required to evaluate interoperability with the Department of Defense's space, ground, and network systems.
The Secretary shall encourage competitive participation from a diverse set of nontraditional defense contractors and commercial space providers.
In carrying out the pilot program, the Secretary shall ensure that any orbital data center services used to process, store, or transmit sensitive or classified information have in place—
cybersecurity protections, including zero-trust architecture, encryption, identity and access management, continuous monitoring, and protections against insider threats;
risk-management measures—
to address supply chain vulnerabilities and foreign ownership, control, or influence; and
that achieve compliance with applicable Department of Defense cybersecurity and authorization requirements;
resilience and mission assurance capabilities, including redundancy, failover, operation in degraded or contested environments, and rapid reconstitution or replacement capabilities;
protections against cyber, electronic warfare, counterspace, and other nonkinetic threats;
secure telemetry, tracking, and command links and associated command-and-control systems, including authenticated command uplinks, encrypted telemetry and data links, anti-spoofing and anti-jamming protections, resilient cryptographic key management, protected timing and navigation inputs, and secure software and firmware update mechanisms;
protections for associated ground systems, mission operations centers, terrestrial network connections, software supply chains, and user access interfaces, including segmentation, continuous monitoring, access controls, encryption, and resilience against cyber intrusion, disruption, and unauthorized access; and
protections to ensure workload isolation, tenant separation, and data sovereignty for sensitive or classified information processed, stored, or transmitted through orbital data center services, including safeguards against unauthorized cross-tenant, cross-domain, or provider access.
The Secretary shall ensure that any orbital data center services evaluated under the pilot program are interoperable with existing Department of Defense command, control, communications, and intelligence systems.
In carrying out the pilot program, the Secretary, acting through the Director of the Defense Innovation Unit, shall consult with—
the Assistant Secretary of Defense for Space Policy;
service acquisition executives (as defined in section 101 of title 10, United States Code);
the Space Force and other military departments with potential operational interest or transition pathways;
the National Reconnaissance Office;
the National Geospatial-Intelligence Agency; and
such other individuals and organizations as the Secretary considers appropriate.
Not later than December 31, 2028, the Secretary shall provide the congressional defense committees (as defined in section 101 of title 10, United States Code) with a briefing on—
execution of the pilot program;
operational use cases evaluated;
lessons learned from operational employment;
recommendations regarding future acquisition or operational use of orbital data center services;
cybersecurity risks, insider threat vulnerabilities, and mitigation measures;
resilience against counterspace threats and contested space environments;
commercial provider risks, including supply chain and foreign ownership concerns; and
recommendations for security, resilience, and acquisition requirements for any future program of record.
The authority to carry out the pilot program under this section shall terminate on the date that is five years after the date of the enactment of this Act.
In this section, the term orbital data center means a space-based computing, data storage, or networking capability, including 1 or more spacecraft, hosted payloads, or distributed orbital architectures, designed primarily to provide persistent, scalable, or shared in-orbit processing, analysis, storage, fusion, routing, or dissemination of data as a distinct operational capability, rather than as a function ancillary to the primary mission of a spacecraft, prior to transmission to terrestrial or other external infrastructure, including to reduce latency, mitigate bandwidth constraints, improve operational resilience, or support time-sensitive missions.