Senate Bill Aims for NIST to Craft Cyber Rules for Drones

Tl;DR: Sens. Mark Warner and John Thune have introduced a bill that would direct the National Institute of Standards and Technology (NIST) to develop cybersecurity guidelines for the Federal government’s use of drone vehicles. The bill would also require government contractors to report any known security vulnerabilities to the Federal government. The bill aims to ensure the safety and security of drones as they become more prevalent in society.

The Drone Evaluation to Eliminate Cyber Threats Act of 2024, or DETECT Act, would direct the National Institute of Standards and Technology (NIST) to develop guidelines for the cybersecurity of civilian drones used by the Federal government. The bill would also require at least one Federal agency to pilot test the guidelines and then require every agency with civilian drones to implement policies and principles based on the NIST guidelines. The Office of Management and Budget (OMB) would be responsible for issuing guidance to agencies on reporting security vulnerabilities discovered in drones.

The bill would not only apply to the Federal government but also has implications for the private sector. While NIST guidelines would be voluntary for private sector drone users, the legislation would require government contractors to report any known security vulnerabilities to the Federal government.