# Legal, Economic and Cyber Security Framework Considerations for Drone Usage
## Appendix A Questionnaire  
1. Do you find drones useful for economic activities? Yes No
2. How useful drones are in the following sectors? (question 1 from the manuscript) A. Agriculture (1-5) B. Industrial (1-5) C. Military (1-5) D. Public Order (1-5) E. Topography (1-5) F. Rescue missions (1-5)G. Retail (1-5) H. Transport (1:5) I. None (1:5)
3. Who is liable for negligent flying of drones that results in damages incurred by objects on the ground or in the air? A. The user of the drone, because he/she should be careful while flying B. The user of the drone, because he/she did not comply with the requirements in the drone manual C. The producer of the drone software D. The entity that assembled the drone software and hardware
4. Which of the following are useful preventive measures to prevent damages caused by negligent flying? A. Automatic responses of the drone to prevent certain types of crashes/incidents (1:5) B. Periodical training to be completed by the professional drone users (1:5) C. Obtaining a drone driving license after a number of training hours for drone driving (1:5)
5. Who is liable in case the drone software was modified by the user and this modification generated the damages or drone crash or possibility of hacker to take over the drone? (question 8 from the manuscript) A. The drone software producer, for permitting the drone user to change the software B. The drone software producer, for not having a mechanism in place to approve any changes to the software C. The relevant authorities for not having a certification process for changes to drone software D. The drone user
6. Which of the following are useful preventive measures to prevent damages/hacker attacks in case of drone software being modified by the user? (question 9 from the manuscript) A. Any change to the drone software should be approved by the drone software producer (1:5) B. A certification mechanism should be in place to perform a cyber security review of any change in the drone software (1:5) C. Users should not be able to change the drone software (1:5)
7. Who is liable in case the drone software contained vulnerabilities from the outset and these permitted a hacker to control the drone and generate damages? (question 4 from the manuscript) A. The software producer B. The drone distributor/seller C. The drone user D. The cyber security solution used to protect the drone E. The entity that audited or tested from a cyber security perspective the drone
8. Which of the following are useful preventive measures in case of software vulnerabilities included from the outset in the drone software? (question 5 from the manuscript) A. Cyber security auditing before the drone is placed on the market (1:5) B. Periodic cyber security auditing to be performed by the user in order to be allowed to fly the drone (1:5) C. Failsafe mechanisms in case the drone is taken over by hackers in order to safely land the drone and alert the user (1:5)* _Appl. Sci._**2022**, 12, 4663
* _Cyber security software to be included in the drone to prevent intrusions and respond to them (1:5)
* _Who is liable in case a software update is available for the drone software and the drone user did not install this update? (question 6 from the manuscript)_
* _The drone user for not installing the update properly_
* _The drone software producer for not indicating the criticality of the update
* _The drone software producer for not making the update mandatory before further use of the drone
* _Which of the following are preventive measures for ensuring software updates are properly and timely installed on drone software?