Who Should Control the Airspace Around Critical Infrastructure? with Scott Parker

Drones are a serious operational concern for critical infrastructure owners and operators. In this episode of Cyber Focus, Frank Cilluffo sits down with Scott Parker, founder of Aerisq and former Chief of UAS Security at CISA, to discuss how drone capabilities have changed the risk picture for airports, utilities, chemical facilities, pipelines, prisons, and other sensitive sites.

The conversation examines the FAA's Section 2209 rulemaking (open for public comment through August 5th, 2026), along with the limits of flight restrictions and the growing need for "Air Domain Awareness" alongside cyber and physical security. Parker also explains why counter-UAS strategy must balance technology, legal authority, proportional response, and the practical realities of defending infrastructure at scale.

Main Topics

• Drone risks to critical infrastructure
• Lessons from Ukraine
• FAA Section 2209
• Standard vs. special UASFRs
• Air Domain Awareness
• State and local counter-UAS authority
• Cost and scale of drone defense
• AI and autonomous drone risk
• Secure-by-design drone capabilities

Key Quotes

"There is a huge imbalance between what it costs to take [a drone] down as opposed to what it costs to fly one." — Scott Parker

"A vast majority of our critical infrastructure is open airspace. ... Of the 90-something nuclear facilities, less than five have active flight restrictions over them." — Scott Parker

"There are thermal sensors that can read how much oil is in a tank. There are LiDAR that can map an infrastructure's detailed schematics. And there are also cyber tools that can be equipped to sniff out open networks around facilities." — Scott Parker

"Someone who means to do harm, they can add real-time collection to what's already out there using AI and... very likely develop a very structured plan on how to be successful." — Scott Parker

"They [critical infrastructure owner-operators] are on the front lines. That's what we're concerned about. So they need the protection." — Scott Parker

Relevant Links and Resources

• CISA UAS Security
• FAA Section 2209 rulemaking (Public comment open until August 5, 2026)
• Safer Skies Act rulemaking (Public comment open until September 4, 2026)

About the Guest:

Scott Parker is the founder and principal consultant of Aerisq, where he helps public and private sector organizations manage the cyber and physical risks posed by drones. He previously served as the Chief of UAS Security at CISA, where he built and led the agency's first UAS Security Program and helped shape national guidance on drone risk management for critical infrastructure. Parker also served 27 years in the U.S. Army, culminating as Sergeant Major for the Special Operations Division at the Pentagon.