The order also requires the feds to inventory covered UAS that are already agency owned or operated and to report their already-in-place security protocols. Many federal agencies have already done this, at least with respect to China. The Army moved out first when they banned Chinese drones in 2017. The Air Force and Navy did so the following year. The Department of Defense issued a policy ban in 2018, which Congress later codified in Section 848 of the Fiscal Year 2020 National Defense Authorization Act. Multiple other federal agencies instituted similar policy bans, including the Department of the Interior and the Department of Justice. Others, such as the Department of Homeland Security's (DHS) Federal Emergency Management Agency, locked up grant funding for such drones. The DHS office responsible for protecting critical infrastructure, the Cybersecurity and Infrastructure Security Agency (CISA), has been sounding the Chinese drone cyber security threat alarm for years. Now add North Korea, Iran and Russia to that list.
After the feds generate their inventory reports, no more than 120 days later, the Director of National Intelligence, with the Secretary of Defense, the Attorney General, the Secretary of Homeland Security, the Director of the Office of Science and Technology Policy, and the heads of other appropriate agencies must review them and submit their own security assessment to the President. That report should also outline, "potential steps that could be taken to mitigate these risks, including, if warranted, discontinuing all Federal use of covered UAS and the expeditious removal of UAS from Federal service."
The order also gives the Federal Aviation Administration (FAA) it's own "go-do." Within 270 days, the Administrator is supposed to lay out restrictions on the use of UAS on or over critical infrastructure or other sensitive sites per Section 2209 of the FAA Extension, Safety, and Security Act of 2016 (FESSA, Public Law 114-190). Except they already have a process for this. It's called a Temporary Flight Restriction (TFR), issued pursuant to Special Security Instruction (SSI) authority. Technically, TFRs can only be requested by national defense, national security, and federal intelligence departments and agencies. However, other government or private sector entities can, in the interest of national security, request those agencies to sponsor a TFR over critical infrastructure, oil refineries and chemical facilities, amusement parks or other locations that warrant such restrictions. FAA FDC NOTAM 7/7872, which the FAA modifies from time to time, defines restrictions and covered locations. An updated table can be found here and on the B4UFly App. Disney World has had a TFR in place that predates even the FESSA. If the idea is to give a direct line from private industry to the FAA on TFRs, as opposed to through a security agency sponsor, the agency will definitely need additional manpower. And money.
Speaking of money, funding is actually mentioned in the order. It encourages federal agency heads to budget for replacement drones (good for U.S. industry) and directs the Office of Management and Budget (OMB) to find the funding to do so (even better for U.S. industry).
Perhaps because this latest executive order on drones was one of many in the final hours of a lameduck administration, it is unnumbered and cites no legal authority as its basis. Nevertheless, for the most part, it makes an abundant amount of sense from a national security perspective. If this order has staying power – and it could – the clear winners here will be federal security agencies as well as U.S. and non-adversary country drone makers. But only if OMB shows us the money.