Regulations and standards
The rules that determine what an organisation can deploy, what it has to report, and what assessments it already owes. These cover obligations on facility operators and agencies rather than the flight rules that apply to drone pilots.
- lapsed CFATS Chemical Facility Anti-Terrorism Standards CFATS set security requirements for high-risk chemical facilities. Congress allowed the statutory authority to expire on 28 July 2023, and CISA cannot currently enforce the regulations.
- in force NERC CIP-014 NERC Reliability Standard CIP-014 CIP-014 requires utilities to identify their most critical transmission assets and to assess and plan for their physical security. Aerial exposure is an input to an assessment that is already required.
- in force Part 139 Part 139 airport certification and UAS response Certificated airports are required to include an approved UAS response plan in the Airport Certification Manual, covering interruption of airport operations and the safety of manned traffic.
- in force AWIA Section 2013 AWIA Section 2013 risk and resilience assessments Community water systems serving more than 3,300 people must assess risk from malevolent acts and natural hazards across named parts of the system, and review that assessment at least every five years.
- in force 18 U.S.C. 32 Aircraft destruction under 18 U.S.C. 32 An unmanned aircraft is an aircraft in United States law, so damaging or destroying one can engage a federal criminal provision rather than a local firearms or property matter.
- in force FCC spectrum rules FCC rules on counter-drone equipment and spectrum The Communications Act governs counter-drone equipment that transmits. The FCC has waived marketing and importation restrictions under the SAFER SKIES framework and granted temporary spectrum authority for eligible agencies.