Unmanned Aircraft Systems (UAS) - Critical Infrastructure

UAS flying near a bridge in New York City (Source: DHS)In addition to recreational use, unmanned aircraft systems (UAS)—also known as unmanned aerial vehicles (UAV) or drones—are used across our Nation to support firefighting and search and rescue operations, to monitor and assess critical infrastructure, to provide disaster relief by transporting emergency medical supplies to remote locations, and to aid efforts to secure our borders. However, UAS can also be used for malicious schemes by terrorists, criminal organizations (including transnational organizations), and lone actors with specific objectives.

Download a printer-friendly fact sheet on:

What Is the Threat?

UAS-related threats may include:

  • Weaponized or Smuggling Payloads – Depending on power and payload size, UAS may be capable of transporting contraband, chemical, or other explosive/weaponized payloads.
  • Prohibited Surveillance and Reconnaissance – UAS are capable of silently monitoring a large area from the sky for nefarious purposes.
  • Intellectual Property Theft – UAS can be used to perform cyber crimes involving theft of trade secrets, technologies, or sensitive information.
  • Intentional Disruption or Harassment – UAS may be used to disrupt or invade the privacy of other individuals.

Why Is the Threat Important to Critical Infrastructure?

Since UAS use in the United States has increased as a cost-effective, versatile business and national security tool, as well as a popular recreational hobby, the Federal Aviation Administration (FAA) estimates combined hobbyist and commercial UAS sales will rise from 2.5 million in 2016 to 7 million by 2020. As a result, potential threats associated with UAS will continue to expand in nature and increase in volume in the coming years. Because of their physical and operational characteristics, UAS can often evade detection and create challenges for the critical infrastructure community.

What Actions Can You Take?

Recognizing and implementing security practices that meet federal, state, and local regulatory requirements are key to successfully managing potential security incidents associated with UAS. Although no single solution will fully mitigate this risk, there are several measures that can be taken to address UAS-related security challenges:

  • Research and implement legally approved counter-UAS technology.
  • Know the air domain around the facility and who has authority to take action to enhance security.
  • Contact the FAA to consider UAS restrictions in close proximity to fixed site facilities. More information can be found on the Federal Aviation Administration (FAA) website.
  • Update Emergency/Incident Action Plans to include UAS security and response strategies.
  • Build federal, state, and local partnerships for adaptation of best practices and information sharing. More information can be found at Hometown Security.
  • Report potential UAS threats to your local law enforcement agency.
  • Review awareness and mitigation measures for use by federal departments and agencies. More information can be found at Protecting Against the Threat of Unmanned Aircraft Systems (.pdf, 5.72 MB)

UAS and Critical Infrastructure – Understanding the Risk (Video)

The Unmanned Aircraft Systems (UAS) video contains information on critical infrastructure challenges associated with the UAS threat, counter UAS security practices, actions to consider for risk mitigation, and provides messages of facility and organizational preparedness related to UAS incidents.

Cybersecurity Risks

  • Cybersecurity Best Practices for Operating Commercial Unmanned Aircraft Systems (.pdf, 369 KB) –  Critical infrastructure operators, law enforcement, and all levels of government are increasingly incorporating UAS into their operational functions. Although UAS offer benefits to their operators, they can also pose cybersecurity risks. This guide provides cybersecurity best practices to help commercial operators protect their networks, information, and personnel.
  • Additional UAS security resources may be found on the Homeland Security Information Network - Critical Infrastructure site (HSIN-CI). To learn more about HSIN-CI, please visit https://www.dhs.gov/hsin-critical-infrastructure.

Legal Authorities

  • Interagency Legal Advisory of UAS Detection Mitigation Technologies - The Department of Homeland Security (DHS), Federal Aviation Administration (FAA), Department of Justice (DOJ), and Federal Communications Commission issued an advisory guidance document to assist non-federal public and private entities interested in using technical tools, systems, and capabilities to detect and mitigate UAS. 
  • DHS CUAS Legal Authorities (.pdf, 912 KB) - This factsheet communicates the Department’s legal authority under the Preventing Emerging Threats Act to counter credible threats from UAS to the safety or security of a covered facility or asset, ensure legal privacy protections, and educate the public on the future of DHS CUAS policy.

DHS UAS Resources

Contact Information

For more information, please send an email to SUASsecurity@cisa.dhs.gov.

Was this webpage helpful?  Yes  |  Somewhat  |  No