This paper addresses the issue of cybersecurity in the context of the space environment and discusses, from a legal perspective, what it means for a space operator to be cyber-secure. This paper will argue that cybersecurity law should be understood as a governance framework constructed from a variety of documents that includes traditional legal documents, but that also relies on policies, technical standards, and technical specifications. This paper will then discuss how a lawyer is supposed “do” cybersecurity for space clients, in particular when the law itself is difficult to pinpoint.