,,ii  #aah? ,,congress  #b;d ,session   
,s4 #cgeh  ,,9 ,,! ,,s5ate ,,( ,,!      
,,unit$ ,,/ates  ,febru>y #g1 #bjbd,mr4 
,w>n] 7= himself & ,mr4 ,?une7 introduc$
 ! foll[+ bill2 :i* 0 read twice &      
ref]r$ to ! ,committee on ,comm]ce1     
,sci5ce1 & ,transportation  ,a ,,bill   
,to address security vuln]abilities )   
respect to unmann$ aircraft sy/ems us$  
by civilian ,f$]al ag5cies1 & = o!r     
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,drone ,evaluation ,to     
,elim9ate ,cyb] ,?reats ,act or !       
,,detect ,act4  #b4 ,def9itions ,9 ?is  
,act3 7#a7 ,ag5cy ,! t]m ag5cy has !    
mean+ giv5 ! t]m 9 section #cejb ( title
 #dd1 ,unit$ ,/ates ,code4  7#b7        
,critical compon5t ,! t]m critical      
compon5t includes a flight controll]1 a 
radio1 a data transmission device1 a    
cam]a1 a gimbal1 a gr\nd control sy/em1 
op]at+ s(tw>e1 network connectivity1 &  
data /orage4  7#c7 ,director ,! t]m     
,director means ! ,director ( ! ,(fice (
 ,managem5t & ,budget4  7#d7 ,in=mation 

sy/em ,! t]m in=mation sy/em has ! mean+
 giv5 ! t]m 9 section #cejb ( title #dd1
 ,unit$ ,/ates ,code4  7#e7 ,national   
security sy/em ,! t]m national security 
sy/em has ! mean+ giv5 ! t]m 9 section  
#ceeb7;b7 ( title #dd1 ,unit$ ,/ates    
,code4  7#f7 ,secret>y ,! t]m ,secret>y 
means ! ,secret>y ( ,homel& ,security4  
7#g7 ,security vuln]ability ,! t]m      
security vuln]ability has ! mean+ giv5 !
 t]m 9 section #bbjj ( ! ,homel&        
,security ,act ( #bjjb 7#f ,u4,s4,c4    
#fej74  7#h7 ,"u ,secret>y ,! t]m ,"u   
,secret>y means ! ,"u ,secret>y (       
,comm]ce = ,/&>ds & ,te*nology4  7#i7   
,unmann$ aircraft sy/em ,! t]m unmann$  
aircraft sy/em has ! mean+ giv5 ! t]m 9 
section #cca ( ! ,,faa ,mod]nization &  
,re=m ,act ( #bjab 7#di ,u4,s4,c4 #ddhjb
 note74  #c4 ,security guidel9es =      
,f$]al ag5cies on use & managem5t (     
unmann$ aircraft sy/ems  7a7 ,national  
,in/itute ( ,/&>ds & ,te*nology         
developm5t ( /&>ds & guidel9es = ,f$]al 
use ( unmann$ aircraft sy/ems by ag5cies

  7#a7 ,9 g5]al ,n lat] ?an #ij days    
aft] ! date ( ! enactm5t ( ?is ,act1 !  
,"u ,secret>y %all comm5ce ! developm5t 
( guidel9es = ! ,f$]al ,gov]nm5t on !   
appropriate use & managem5t by ag5cies (
 unmann$ aircraft sy/ems own$ or        
controll$ by an ag5cy & regul>ly        
connect$ to or ex*ang+ data ) in=mation 
sy/ems own$ or controll$ by an ag5cy1   
includ+ m9imum in=mation security       
requirem5ts = manag+ cyb]security risks 
associat$ ) su* devices4  7#b7          
,publication ,n lat] ?an #a ye> aft] !  
date ( ! enactm5t ( ?is ,act1 ! ,"u     
,secret>y %all publi% ! guidel9es       
develop$ pursuant to p>agraph 7#a7 9 a  
mann] t is consi/5t ) section #bj ( !   
,national ,in/itute ( ,/&>ds &          
,te*nology ,act 7#ae ,u4,s4,c4          
#bgh;g-#c74  7#c7 ,consi/5cy ) ongo+    
ef=ts ,! ,"u ,secret>y %all ensure t !  
/&>ds & guidel9es develop$ "u p>agraph  
7#a7 are consi/5t ) ! ef=ts ( !         
,national ,in/itute ( ,/&>ds &          
,te*nology 9 effect on ! date ( !       

enactm5t ( ?is ,act-- 7,a7 reg>d+-- 7i7 
examples ( possible security            
vuln]abilities ( unmann$ aircraft       
sy/ems2 &  7ii7 consid]ations = manag+ !
 security vuln]abilities ( unmann$      
aircraft sy/ems2 &  7,b7 ) respect to ! 
foll[+ consid]ations = unmann$ aircraft 
sy/ems3 7i7 ,secure ,developm5t4  7ii7  
,id5tity managem5t4  7iii7 ,pat*        
managem5t4  7iv7 ,configuration         
managem5t4  7v7 ,supply *a9 security4   
7vi7 ,corporate cyb] hygi5e4  7vii7     
,s(tw>e & h>dw>e transp>5cy4  7#d7      
,consid]+ relevant guidel9es ,9 develop+
 ! guidel9es "u p>agraph 7#a71 ! ,"u    
,secret>y %all consid] relevant /&>ds1  
guidel9es1 & be/ practices develop$ by !
 private sector1 ag5cies1 &             
public-private p>tn]%ips1 includ+ !     
foll[+3 7,a7 ,national ,in/itute (      
,/&>ds & ,te*nology ,special            
,publication #hjj-bac 7relat+ to ,io,t  
device cyb]security guidance = ! ,f$]al 
,gov]nm5t74  7,b7 ,national ,in/itute ( 
,/&>ds & ,te*nology ,special            

,publication #hjj-cg 7relat+ to risk    
managem5t framework = in=mation sy/ems &
 organizations74  7,c7 ,! ,gre5 ,,uas   
,frameworks ( ! ,association = ,uncrew$ 
,vehicle ,sy/ems ,int]national          
7,,auvsi71 z am5d$ & ext5d$4  7,d7 ,!   
,cross-,sector ,cyb]security ,p]=mance  
,goals ( ,! ,cyb]security &             
,infra/ructure ,security ,ag5cy4  7#e7  
,consultation ,9 develop+ ! guidel9es   
requir$ by p>agraph 7#a71 ! ,"u         
,secret>y %all consult ) ! ,adm9i/rator 
( ! ,f$]al ,aviation ,adm9i/ration1 !   
,attorney ,g5]al1 & ! heads ( su* o!r   
dep>tm5ts & ag5cies ( ! ,f$]al ,gov]nm5t
 z ! ,"u ,secret>y consid]s appropriate4
  7b7 ,review ( ,f$]al ag5cy in=mation  
security policies & pr9ciples  7#a7     
,requirem5t  7,a7 ,9 g5]al ,n lat] ?an  
#a ye> aft] ! date on :i* ! ,"u         
,secret>y completes ! developm5t ( !    
guidel9es requir$ "u subsection 7a71 !  
,director %all require n less ?an #a    
ag5cy1 on a pilot basis1 to implem5t    
policies & pr9ciples bas$ on ! guidel9es

 ) respect to unmann$ aircraft sy/ems   
own$ or controll$ by ! ag5cy4  7,b7     
,exception ,a pilot implem5tation "u    
subp>agraph 7,a7 %all n apply to any    
unmann$ aircraft sy/em compris$ ( any   
national security sy/em4  7#b7 ,policies
 & pr9ciples ,n lat] ?an #a ye> aft] !  
conclusion ( ! pilot implem5tation "u   
p>agraph 7#a77;,a71 ! ,director %all    
issue policies & pr9ciples necess>y to  
ensure t ! policies & pr9ciples ( ea*   
ag5cy relat+ to ! cyb]security ( unmann$
 aircraft sy/ems are consi/5t ) !       
guidel9es develop$ "u subsection 7a74   
7#c7 ,national security sy/ems ,any     
policy or pr9ciple issu$ by ! ,director 
"u p>agraph 7#b7 %all n apply to        
national security sy/ems4  7c7          
,qu9qu5nial review & revision  7#a7     
,review & revision ( ,,ni/ guidel9es ,n 
lat] ?an #e ye>s aft] ! date on :i* !   
,"u ,secret>y publi%es ! guidel9es "u   
subsection 7a71 & n less frequ5tly ?an  
once e #e ye>s !reaft]1 ! ,"u ,secret>y1
 %all-- 7,a7 review su* guidel9es2 &    

7,b7 revise su* guidel9es z ! ,"u       
,secret>y consid]s appropriate4  7#b7   
,updat$ ,,omb policies & pr9ciples =    
,f$]al ag5cies ,n lat] ?an #ahj days    
aft] ! ,"u ,secret>y makes a revision   
pursuant to p>agraph 7#a71 ! ,director1 
9 consultation ) ! ,director ( !        
,cyb]security & ,infra/ructure ,security
 ,ag5cy ( ! ,dep>tm5t ( ,homel&         
,security1 %all update any policy or    
pr9ciple issu$ "u subsection 7b77#a7 z  
necess>y to ensure ^? policies &        
pr9ciples are consi/5t ) ! review & any 
revision "u p>agraph 7#a7 "u ?is        
subsection & p>agraphs 7#b7 & 7#c7 (    
subsection 7b74  7d7 ,revision ( ,f$]al 
,acquisition ,regulation ,! ,f$]al      
,acquisition ,regulation %all be revis$ 
z necess>y to implem5t any /&>ds &      
guidel9es promulgat$ 9 ?is section4  #d4
 ,guidel9es on ! disclosure process =   
security vuln]abilities relat+ to       
unmann$ aircraft sy/ems  7a7 ,9 g5]al   
7#a7 ,guidance ,! ,director %all issue  
guidance to ag5cies t includes-- 7,a7   

requirem5ts = ! report+1 coord9at+1 &   
receiv+ ( in=mation ab\t-- 7i7 a        
security vuln]ability relat+ to an      
unmann$ aircraft sy/em own$ or controll$
 by an ag5cy2 &  7ii7 ! resolution ( a  
security vuln]ability describ$ 9 clause 
7i72 &  7,b7 requirem5ts relat+ to !    
scope ( vuln]abilities requir$ to be    
report$ "u subp>agraph 7,a71 su* z !    
m9imum sev]ity ( a vuln]ability requir$ 
to be report$ or :e!r vuln]abilities t  
are publicly disclos$ are requir$ to be 
report$4  7#b7 ,contractor compliance ) 
coord9at$ disclosure ( security         
vuln]abilities relat+ to ag5cy unmann$  
aircraft sy/ems ,subject to ! guidance  
issu$ "u p>agraph 7#a71 a contractor or 
aw>dee ( an ag5cy %all report to ! ag5cy
 & ! ,director ( ! ,cyb]security &      
,infra/ructure ,security ,ag5cy if--    
7,a7 a critical compon5t ( any unmann$  
aircraft sy/em op]at$1 manag$1 or       
ma9ta9$ by ! contractor or aw>dee       
conta9s a security vuln]ability1 includ+
 a supply *a9 compromise or an id5tifi$ 

s(tw>e or h>dw>e vuln]ability1 = :i* !re
 is reliable evid5ce ( attempt$ or      
successful exploitation by an actor )\t 
! au?orization ( ! own] ( ! unmann$     
aircraft sy/em2 or  7,b7 ! contractor or
 aw>dee has a reasonable basis to       
suspect or conclude t a critical        
compon5t ( any unmann$ aircraft sy/em   
op]at$1 manag$1 or ma9ta9$ on behalf (  
an ag5cy by ! contractor or aw>dee      
conta9s a security vuln]ability1 includ+
 a supply *a9 compromise or an id5tifi$ 
s(tw>e or h>dw>e vuln]ability1 t has be5
 report$ to ! contractor or aw>dee by a 
?ird p>ty1 includ+ ?r\gh a vuln]ability 
disclosure program4  7b7 ,regulations2  
modifications  7#a7 ,9 g5]al ,n lat] ?an
 #a ye> aft] ! date ( enactm5t ( ?is    
,act-- 7,a7 ! ,f$]al ,acquisition       
,regulatory ,c\ncil %all promulgate     
regulations1 z appropriate1 relat+ to ! 
responsibilities ( contractors &        
recipi5ts ( o!r transaction agreem5ts & 
coop]ative agreem5ts to comply )        
subsection 7a77#b72 &  7,b7 ! ,(fice (  

,f$]al ,f9ancial ,managem5t %all        
promulgate regulations "u title #b1     
,code ( ,f$]al ,regulations1 z          
appropriate1 relat+ to !                
responsibilities ( grantees to comply ) 
subsection 7a77#b74  7#b7 ,implem5tation
 ,n lat] ?an #a ye> aft] ! date on :i* !
 ,f$]al ,acquisition ,regulatory ,c\ncil
 & ! ,(fice ( ,f$]al ,f9ancial          
,managem5t promulgate regulations "u    
p>agraph 7#a71 ! head ( ea* ag5cy %all  
implem5t policies & proc$ures1 z        
appropriate1 necess>y to implem5t ^?    
regulations4  7c7 ,responsibilities (   
,,cisa ,! ,director ( ! ,cyb]security & 
,infra/ructure ,security ,ag5cy %all--  
7#a7 provide support to ag5cies )       
respect to ! implem5tation ( !          
requirem5ts ( ?is section2  7#b7 develop
 tools1 processes1 & o!r me*anisms      
det]m9$ appropriate to (f] ag5cies      
capabilities to implem5t ! requirem5ts (
 ?is section2 &  7#c7 ^u reque/ by an   
ag5cy1 assi/ ! ag5cy 9 ! disclosure to  
v5dors ( newly id5tifi$ security        

vuln]abilities 9 v5dor products &       
s]vices4  #e4 ,contractor compliance )  
coord9at$ disclosure ( security         
vuln]abilities relat+ to ag5cy unmann$  
aircraft sy/ems  7a7 ,prohibition on    
procurem5t & use  7#a7 ,9 g5]al ,subject
 to p>agraph 7#b71 ! head ( an ag5cy may
 n procure or obta91 r5ew a contract to 
procure or obta91 or use an unmann$     
aircraft sy/em if ! ,*ief ,in=mation    
,(fic] ( ! ag5cy det]m9es1 9 conduct+ ! 
review requir$ "u section               
#aacai7;b77#a77;,c7 ( title #dj1 ,unit$ 
,/ates ,code1 ( ! contract = ! unmann$  
aircraft sy/em1 t ! use ( ! unmann$     
aircraft sy/em prev5ts compliance ) !   
/&>ds & guidel9es develop$ "u section   
#c7;a77#a7 ( ?is ,act or ! guidel9es    
issu$ "u section #d7;a77#a7 ( ?is ,act )
 respect to ! unmann$ aircraft sy/em4   
7#b7 ,exemption = comm]cial data buys   
,p>agraph 7#a7 %all n apply :5 ! head ( 
an ag5cy acquires data-- 7,a7 solely f a
 comm]cial or nonpr(it entity1 !        
contract or agreem5t = :i* does n       

specify ! type ( unmann$ aircraft sy/em 
or ! specifications = ! unmann$ aircraft
 sy/em2  7,b7 t w nev] connect to any   
network ( ! ,f$]al ,gov]nm5t2 &  7,c7   
ov] :i* ! head ( ! ag5cy w n h          
op]ational direction or control4  7#c7  
,simplifi$ acquisition ?re%old ,not)/&+ 
section #aije ( title #da1 ,unit$ ,/ates
 ,code1 ! requirem5ts "u p>agraph 7#a7  
%all apply to a contract or subcontract 
9 am\nts n great] ?an ! simplifi$       
acquisition ?re%old4  7b7 ,waiv]  7#a7  
,au?ority ,! head ( an ag5cy may waive !
 prohibition "u subsection 7a77#a7 )    
respect to an unmann$ aircraft sy/em if 
! ,*ief ,in=mation ,(fic] ( t ag5cy     
det]m9es t-- 7,a7 ! waiv] is necess>y 9 
! int]e/ ( national security2  7,b7     
procur+1 obta9+1 or us+ ! unmann$       
aircraft sy/em is necess>y = rese>*1    
te/+1 evaluation1 or tra9+ purposes2 or 
7,c7 ! unmann$ aircraft sy/em is us$--  
7i7 9 a mann] t does n implicate ag5cy  
op]ational or cyb]security conc]ns2 or  
7ii7 9 o!r circum/ances 9 :i* ! head ( !

 ag5cy det]m9es ! risks are m9imal or   
acceptable4  7#b7 ,ag5cy process ,!     
,director %all e/abli% a /&>diz$ process
 = ! ,*ief ,in=mation ,(fic] ( ea* ag5cy
 to foll[ 9 det]m9+ :e!r ! waiv] "u     
p>agraph 7#a7 may be grant$4  7c7       
,reports to ,congress  7#a7 ,report ,n  
lat] ?an #b ye>s aft] ! date ( enactm5t 
( ?is ,act1 & e #b ye>s !reaft] until ! 
date t is #f ye>s aft] ! date ( enactm5t
 ( ?is ,act1 ! ,comptroll] ,g5]al ( !   
,unit$ ,/ates1 9 consultation ) ! heads 
( o!r ,f$]al ag5cies z appropriate1 %all
 submit to ! ,committee on ,homel&      
,security & ,gov]nm5tal ,affairs ( !    
,s5ate1 ! ,committee on ,ov]sight &     
,acc\ntability ( ! ,h\se (              
,repres5tatives1 & ! ,committee on      
,homel& ,security ( ! ,h\se (           
,repres5tatives a report-- 7,a7 on !    
effectiv5ess ( ! process e/abli%$ "u    
subsection 7b77#b72  7,b7 t conta9s     
recomm5d$ be/ practices = ! procurem5t (
 unmann$ aircraft sy/ems2 &  7,c7 t     
li/s-- 7i7 ! numb] & type ( ea* unmann$ 

aircraft sy/em = :i* a waiv] "u         
subsection 7b77#a7 0 grant$ dur+ !      
#b-ye> p]iod prior to ! submission ( !  
report2 &  7ii7 ! legal au?ority "u :i* 
ea* su* waiv] 0 grant$1 su* z :e!r !    
waiv] 0 grant$ pursuant to subp>agraph  
7,a71 7,b71 or 7,c7 ( subsection 7b74   
7#b7 ,classification ( report ,ea*      
report submitt$ "u ?is subsection %all  
be submitt$ 9 unclassifi$ =m1 b may     
include-- 7,a7 a classifi$ annex t      
conta9s ! in=mation describ$ 9 p>agraph 
7#a77;,c72 &  7,b7 a committee-use only 
annex t conta9s in=mation describ$ 9    
p>agraph 7#a77;,c7 t is law en=cem5t    
s5sitive4  7d7 ,effective date ,!       
prohibition "u subsection 7a77#a7 %all  
take effect on ! date t is #b ye>s aft] 
! date ( enactm5t ( ?is ,act4  #f4      
,gov]nm5t ,acc\ntability ,(fice report  
on cyb]security consid]ations ( unmann$ 
aircraft sy/ems  7a7 ,brief+ ,n lat] ?an
 #a ye> aft] ! date ( enactm5t ( ?is    
,act1 ! ,comptroll] ,g5]al ( ! ,unit$   
,/ates %all provide a brief+ to !       

,committee on ,homel& ,security &       
,gov]nm5tal ,affairs ( ! ,s5ate1 !      
,committee on ,ov]sight & ,acc\ntability
 ( ! ,h\se ( ,repres5tatives1 & !       
,committee on ,homel& ,security ( !     
,h\se ( ,repres5tatives on broad]       
unmann$ aircraft sy/em cyb]security     
ef=ts4  7b7 ,report ,n lat] ?an #b ye>s 
aft] ! date ( enactm5t ( ?is ,act1 !    
,comptroll] ,g5]al ( ! ,unit$ ,/ates    
%all submit to ! ,committee on ,homel&  
,security & ,gov]nm5tal ,affairs ( !    
,s5ate1 ! ,committee on ,ov]sight &     
,acc\ntability ( ! ,h\se (              
,repres5tatives1 & ! ,committee on      
,homel& ,security ( ! ,h\se (           
,repres5tatives a report on broad]      
unmann$ aircraft sy/em cyb]security     
ef=ts address$ 9 ! brief+ requir$ "u    
subsection 7a74