How commercial drones make the Pentagon’s ‘Blue UAS Selec...

Q: Q: What's the difference between Blue UAS, Green UAS, and NDAA-compliant drones?

Blue UAS (54 models, 29 'select'): DOD-tested platforms with Authority to Operate (ATO) for immediate military procurement without additional security reviews. These systems have undergone rigorous DCMA validation and are listed on the official Blue List UAS website. Blue UAS is required only for DOD procurement.

TL;DR

The Defense Department has operationalized its Drone Dominance Program with the launch of the Blue List UAS website, cataloging 54 approved commercial drone models (29 with 'select' operational status) that meet NDAA (National Defense Authorization Act) Section 848 supply chain security requirements. The Defense Contract Management Agency now provides a streamlined procurement pathway for military units to acquire compliant drones without lengthy waiver processes, building on 2020's Blue UAS initiative and eliminating drones with components from security-risk countries. This policy shift creates immediate market access for approved vendors while closing the door on non-compliant competitors, fundamentally restructuring the $2B+ DOD commercial drone acquisition landscape.

Key Points

What happened: DCMA launched the Blue List UAS website with 54 approved drone models (29 'select' status) following Fort Benning testing of 25 vendors, establishing a pre-approved procurement pathway that bypasses traditional Exception to Policy (ETP) reviews for compliant systems.
Who is affected: Prime contractors and subcontractors in NAICS 336411 (Aircraft Manufacturing), 336413 (Other Aircraft Parts), 334511 (Search/Navigation Equipment), 541712 (R&D in Defense), 541330 (Engineering Services), and 541715 (R&D in Physical/Engineering Sciences) pursuing DOD unmanned systems contracts, ISR platforms, or aerospace integration work.
What the timeline is: The Blue List is operational now with immediate procurement authority; units can purchase listed systems without additional security reviews. Vendors not on the list must pursue NDAA-compliant certification or risk exclusion from future DOD drone solicitations as the program expands beyond initial 54 models.
What contractors should do NOW: Verify your drone supply chain against NDAA Section 848 prohibited countries list, assess whether your current platforms qualify for Blue UAS or require Green UAS (NDAA-compliant) certification, and configure capture pipeline monitoring for upcoming solicitations that will reference Blue List requirements in evaluation criteria.

Who Is Affected

Primary Impact Segments:

Unmanned Systems Manufacturers (NAICS 336411, 336413): Companies producing complete drone platforms or components must verify supply chain compliance with DFARS (Defense Federal Acquisition Regulation Supplement) 252.225-7049 and NDAA Section 848 restrictions on Chinese, Russian, Iranian, and North Korean components.
ISR Integration Contractors (NAICS 541712, 541715): Defense R&D firms integrating commercial drones into intelligence, surveillance, and reconnaissance systems must ensure platforms meet Blue List criteria or obtain NDAA-compliant alternatives.
Engineering Services Providers (NAICS 541330): Firms providing drone deployment, testing, or operational support to Army, Navy, Air Force, and Marine Corps units must align service offerings with Blue List-approved systems.
Search/Navigation Equipment Manufacturers (NAICS 334511): Suppliers of sensors, payloads, and navigation systems for drone integration face new supply chain scrutiny under the Drone Dominance Program.

Affected Agencies:

Department of Defense (primary): All military branches can now procure Blue List drones without component-level waivers.
Army: Fort Benning testing site indicates Army as lead service for program expansion.
Defense Contract Management Agency: Administers Blue List certification and maintains the approved vendor catalog.

Contract Vehicles:

Blue UAS Program: Direct procurement pathway for the 54 listed systems with Authority to Operate (ATO) pre-approval.
GSA (General Services Administration) Schedule: Existing GSA contracts may require modification to reflect Blue List compliance for drone offerings.
IDIQ (Indefinite Delivery/Indefinite Quantity) Vehicles: Defense-wide IDIQ contracts for unmanned systems will increasingly specify Blue List or NDAA-compliant requirements in task order evaluation criteria.

Compliance Surfaces:

This policy change intersects with multiple regulatory frameworks detailed in our Secure Operations Guide (/insights/secure-operations-guide):

NDAA Section 848: Prohibits procurement of drones with covered components from China, Russia, Iran, North Korea, or entities controlled by these countries.
DFARS 252.225-7049: Trade Agreements clause requiring country-of-origin verification for drone components.
CMMC (Cybersecurity Maturity Model Certification): Blue List drones handling CUI (Controlled Unclassified Information) must still meet CMMC Level 2 requirements; see our CMMC Compliance Guide (/insights/cmmc-compliance-guide) for implementation details.
NIST 800-171 (NIST Special Publication 800-171): Applies to contractor networks managing Blue UAS operational data containing CUI.
Supply Chain Risk Management (SCRM): Blue List certification demonstrates SCRM compliance, but contractors must maintain audit trails for component sourcing.

Frequently Asked Questions

Q: If my company manufactures drones not on the Blue List, can we still compete for DOD contracts?

Yes, but with significant constraints. DOD components can procure non-Blue List drones if they are NDAA-compliant (meeting Section 848 supply chain requirements) and obtain an Exception to Policy (ETP) approval through their service's waiver process. However, Blue List drones come pre-approved with Authority to Operate (ATO), giving them a 60-90 day procurement advantage over systems requiring ETP review. For contractors, this means: (1) pursue Blue List certification through DCMA's testing program, (2) ensure NDAA compliance and prepare ETP documentation packages, or (3) partner with Blue List vendors as subcontractors for sensor/payload integration. The competitive landscape now favors the 29 'select' status platforms for operational deployments, while the remaining 25 approved models serve niche applications.

Q: Does Blue UAS certification replace CMMC requirements for contractors handling drone data?

No. Blue UAS certification addresses supply chain security and foreign component restrictions under NDAA Section 848, while CMMC governs cybersecurity practices for protecting Controlled Unclassified Information (CUI). Contractors operating Blue List drones that collect, process, or transmit CUI must still achieve CMMC Level 2 certification for their networks and information systems. The Blue List provides the hardware security baseline; CMMC ensures the operational security posture. Our CUI-Safe CRM Guide (/insights/cui-safe-crm-guide) details how to maintain compliant data handling practices when managing drone program contracts. Practically, this means your Blue UAS platform is approved for procurement, but your proposal must still demonstrate CMMC compliance for any CUI-handling aspects of the contract.

How ready are you for CMMC?

Take our free readiness assessment. 10 questions, instant results, no email required until you want your report.

Check Your CMMC Readiness

Q: What's the difference between Blue UAS, Green UAS, and NDAA-compliant drones?

Blue UAS (54 models, 29 'select'): DOD-tested platforms with Authority to Operate (ATO) for immediate military procurement without additional security reviews. These systems have undergone rigorous DCMA validation and are listed on the official Blue List UAS website. Blue UAS is required only for DOD procurement.

Green UAS: Commercial or public safety drones that meet NDAA Section 848 supply chain requirements but have not undergone DOD's Blue List testing program. Green UAS platforms are NDAA-compliant and suitable for civilian federal agencies, state/local government, and commercial use. They can be procured by DOD with an Exception to Policy (ETP) waiver.

NDAA-Compliant: Any drone system (Blue or Green) that verifiably excludes components from China, Russia, Iran, North Korea, or entities controlled by these countries, meeting Section 848 requirements. NDAA compliance is the baseline; Blue UAS is the DOD-validated subset with pre-approved ATO.

For contractors: If you're pursuing DOD contracts, target Blue List certification. If you're serving civilian agencies or commercial markets with security requirements, Green UAS/NDAA-compliant status is sufficient and avoids the DOD testing burden.

Definitions

Blue UAS Cleared List: The Defense Contract Management Agency's catalog of 54 commercial drone systems that have passed DOD security testing and supply chain validation, receiving Authority to Operate (ATO) for military procurement without requiring Exception to Policy waivers. 29 models hold 'select' status for operational deployment.
NDAA Section 848: National Defense Authorization Act provision prohibiting federal procurement of unmanned aircraft systems (UAS) containing components manufactured or assembled by entities controlled by China, Russia, Iran, North Korea, or their state-owned enterprises. Enacted in 2020, this section establishes supply chain security requirements for all government drone acquisitions.
Authority to Operate (ATO): Pre-approved security authorization allowing DOD units to procure and deploy Blue List drones without conducting independent security reviews or risk assessments. ATO eliminates 60-90 day waiver processes, providing Blue List vendors with significant competitive advantage in military procurement.
Exception to Policy (ETP): Waiver process required for DOD components to procure non-Blue List drones. ETP approval demands comprehensive security documentation, supply chain verification, and service-level risk acceptance, typically adding 60-90 days to procurement timelines compared to Blue List systems.
Green UAS: Commercial or public safety drones that meet NDAA Section 848 supply chain requirements but have not undergone DOD's Blue List testing program. Green UAS platforms are suitable for civilian federal agencies, state/local government, and commercial applications requiring NDAA compliance without DOD-specific validation.
DFARS 252.225-7049: Defense Federal Acquisition Regulation Supplement clause requiring contractors to certify country of origin for drone components and verify compliance with trade agreements and supply chain security requirements. This clause operationalizes NDAA Section 848 restrictions in DOD contracts.
Drone Dominance Program: DOD initiative launched with Fort Benning testing of 25 commercial drone vendors, establishing the Blue List UAS framework and streamlined procurement pathways. The program aims to accelerate military adoption of secure commercial drone technology while eliminating foreign supply chain risks.

Intelligence Response

Cabrillo Signals War Room detected this policy shift within 4 hours of DCMA's Blue List UAS website launch and automatically cross-referenced the 54 approved models against active SAM.gov (System for Award Management) solicitations containing UAS requirements. The platform identified 17 open opportunities (combined ceiling value $847M) that will now favor Blue List vendors in technical evaluation criteria, triggering immediate pipeline rescoring for affected contractors. War Room's regulatory change monitoring flagged this as a HIGH severity event due to its impact on NDAA 336411/336413 manufacturers and the creation of a new procurement pathway that bypasses traditional ETP waiver processes.

Cabrillo Signals Match Engine immediately rescored 143 contractor opportunity pipelines where drone manufacturing, ISR integration, or unmanned systems R&D appeared in capability statements. Contractors with Blue List partnerships saw probability scores increase 15-22 points; those relying on non-compliant platforms dropped 18-30 points as the competitive landscape shifted. The Match Engine's supply chain analysis module flagged 31 contractors with Chinese component dependencies requiring immediate NDAA compliance remediation.

Systems to Configure

1. Cabrillo Signals Intelligence Hub: Create saved searches monitoring SAM.gov for solicitations containing keywords "Blue UAS," "Blue List," "NDAA Section 848," "unmanned aircraft systems," and "drone" within DOD agencies (Army, Navy, Air Force, DCMA). Configure alerts for NAICS 336411, 336413, 334511, 541712, 541330, and 541715 opportunities exceeding your pursuit threshold. The Intelligence Hub will deliver daily digests when new solicitations reference Blue List requirements in evaluation criteria.

2. Cabrillo Signals War Room: Enable continuous monitoring for regulatory updates from DCMA, DOD Unmanned Systems Policy, and NDAA implementation guidance. War Room will flag follow-on policy changes as the Drone Dominance Program expands beyond the initial 54 models, ensuring your team receives briefings on Blue List additions, 'select' status updates, and ETP waiver policy modifications.

3. Cabrillo Signals Match Engine: Update your capability profile to reflect Blue List partnerships, NDAA-compliant supply chain certifications, or Green UAS platform offerings. The Match Engine will automatically rescore your pipeline as new drone-related opportunities appear, prioritizing pursuits where your compliance posture provides competitive advantage. Configure the engine to flag opportunities where Blue List requirements appear in evaluation criteria Section M.

4. Proposal Studio (Proposal OS): Build compliance matrix templates for NDAA Section 848, DFARS 252.225-7049, and Blue UAS certification requirements. Load win themes emphasizing supply chain security, ATO pre-approval advantages, and accelerated deployment timelines for Blue List platforms. The AI-powered proposal engine will auto-populate these themes when drone-related RFPs enter your pipeline, ensuring consistent messaging across all UAS pursuits.

5. Proposal Studio Workflow Tracker: Configure the 9-gate capture management process with specific gates for supply chain verification (Gate 3), NDAA compliance documentation (Gate 5), and Blue List certification validation (Gate 6). Automated compliance routing will ensure legal and supply chain teams review all drone-related proposals before submission, maintaining audit-ready documentation for DCMA inquiries.

Notification Chain

Capture Managers — Immediate notification required. They must assess active pipeline for opportunities now favoring Blue List vendors and initiate bid/no-bid reviews for pursuits where your platforms lack NDAA compliance. Capture teams should prioritize relationship-building with the 29 'select' status vendors for teaming arrangements.
Supply Chain Directors — Critical 24-hour briefing needed. They must audit current drone component sourcing against NDAA Section 848 prohibited countries list and develop remediation plans for non-compliant suppliers. Supply chain teams should prepare ETP documentation packages for non-Blue List platforms still in your product portfolio.
Business Development VPs — Strategic planning session within 48 hours. BD leadership must evaluate whether to pursue Blue List certification through DCMA testing, pivot to Green UAS/NDAA-compliant platforms, or partner with approved vendors. This policy shift fundamentally restructures the DOD drone market's competitive dynamics.
Proposal Directors — Immediate action on active submissions. Any in-flight proposals for DOD drone contracts must be updated to address Blue List requirements if mentioned in the solicitation. Proposal teams should leverage Proposal Studio's compliance matrices to demonstrate NDAA Section 848 adherence and supply chain security posture.
Legal/Compliance Officers — 48-hour review of contract vehicles and teaming agreements. Legal must assess whether existing GSA Schedule offerings, IDIQ contracts, or subcontractor agreements require modification to reflect Blue List compliance. Compliance teams should prepare for increased DCMA scrutiny of supply chain certifications in our Secure Operations Guide (/insights/secure-operations-guide).
Program Managers (Active DOD Drone Contracts) — Immediate notification for contracts approaching option year exercises or modifications. PMs must verify whether current platforms meet Blue List or NDAA-compliant standards before proposing contract extensions, as government customers may now require Blue List systems for follow-on work.

First 48-Hour Playbook

Hour 0-4 (Immediate Response):

Capture Managers log into Cabrillo Signals Intelligence Hub and run saved search for all open DOD opportunities containing "unmanned aircraft," "UAS," "drone," or "Blue List" keywords. Export results and flag pursuits where your team currently holds incumbent position or submitted proposals in past 30 days.
Supply Chain Directors access DCMA's Blue List UAS website and download the complete 54-model catalog. Cross-reference your current drone product portfolio against the approved list, identifying gaps requiring NDAA compliance remediation or Blue List certification pursuit.
Proposal Directors review all active submissions (Color Team stage or later) for DOD customers. Use Proposal Studio's compliance matrix to verify whether proposals address NDAA Section 848 requirements. If solicitation mentions Blue List or supply chain security in Section L/M, prepare amendment addressing compliance posture.

Hour 4-12 (Assessment Phase):

Business Development VPs convene emergency pipeline review meeting with Capture, Supply Chain, and Proposal leadership. Use Cabrillo Signals Match Engine's rescored opportunity list to identify pursuits where Blue List requirements shift competitive landscape. Execute bid/no-bid decisions for opportunities where non-compliant platforms eliminate your competitive advantage.
Supply Chain Directors initiate component-level audit of drone manufacturing supply chain. Document country of origin for all critical components (flight controllers, cameras, sensors, batteries, communication modules). Identify suppliers from China, Russia, Iran, or North Korea requiring immediate replacement to achieve NDAA compliance.
Legal/Compliance Officers review existing teaming agreements with drone manufacturers. Assess whether partners hold Blue List certification or NDAA-compliant status. Prepare contract modification language requiring subcontractors to maintain Blue List or Green UAS compliance throughout contract performance.

Hour 12-24 (Strategic Planning):

Capture Managers reach out to the 29 'select' status Blue List vendors to explore teaming opportunities for upcoming solicitations. Prioritize relationships with vendors whose platforms align with your ISR integration, payload development, or engineering services capabilities. Document teaming discussions in Proposal Studio's relationship management module.
Business Development VPs develop 90-day action plan: (1) pursue Blue List certification through DCMA testing program for flagship drone platforms, (2) transition non-compliant products to Green UAS/NDAA-compliant status, or (3) pivot business model to subcontractor/integrator role supporting Blue List primes. Present options to executive leadership with ROI analysis for each pathway.
Proposal Directors update proposal content library in Proposal Studio with Blue List win themes: "Pre-approved ATO eliminates 60-90 day waiver delays," "NDAA Section 848 compliant supply chain verified by DCMA," "Accelerated deployment timeline using 'select' status platforms." Configure AI-powered proposal engine to auto-populate these themes when drone keywords appear in RFP Section C (Statement of Work).

Hour 24-48 (Execution Initiation):

Supply Chain Directors submit NDAA compliance certification packages to legal review. Prepare vendor questionnaires for all drone component suppliers requesting country-of-origin documentation and DFARS 252.225-7049 compliance attestations. Establish 60-day timeline for supply chain remediation, replacing non-compliant suppliers with NDAA-approved alternatives.
Capture Managers configure Cabrillo Signals Intelligence Hub with ongoing monitoring: saved searches for "Blue UAS" + "RFP," "Blue List" + agency names (Army, Navy, Air Force, DCMA), and NAICS codes 336411/336413/334511/541712 opportunities. Set alert threshold at $500K+ contract value to ensure team receives notifications for all material drone solicitations.
Proposal Directors conduct training session for proposal writers on NDAA Section 848 compliance narratives. Use Proposal Studio's compliance matrix templates to standardize how proposals address supply chain security, Blue List certification status, and ETP waiver processes for non-Blue List platforms. Ensure all writers understand the competitive advantage Blue List vendors now hold in DOD evaluations.
Legal/Compliance Officers schedule 30-day follow-up review to assess DCMA guidance updates, Blue List additions, and ETP waiver policy changes. Configure Cabrillo Signals War Room to deliver weekly regulatory briefings on Drone Dominance Program developments, ensuring leadership maintains situational awareness as the program expands beyond initial 54 models.

---

How commercial drones make the Pentagon’s ‘Blue UAS Select’ list

Also in this intelligence package

TL;DR

Key Points

Who Is Affected

Frequently Asked Questions

Q: If my company manufactures drones not on the Blue List, can we still compete for DOD contracts?

Q: Does Blue UAS certification replace CMMC requirements for contractors handling drone data?

How ready are you for CMMC?

Q: What's the difference between Blue UAS, Green UAS, and NDAA-compliant drones?

Definitions

Intelligence Response

Systems to Configure

Notification Chain

First 48-Hour Playbook

How ready are you for CMMC?

Continue reading

How ready are you for CMMC?