Nuclear, Biological and Chemical (NBC) sweeping police officers are in anti-terrorist drill on chemical weapons in Tokyo 22 October 2004.
STR/AFP via Getty Images
Japan’s Cabinet formally adopted a sweeping counterterrorism action plan on Monday targeting chemical, biological, radiological, nuclear, and explosive — or CBRNE — threats, including the creation of a new expert advisory panel and a dedicated cross-ministry intelligence body to track drones and artificial intelligence tools that could be weaponized by terrorists. The twin announcements mark the country’s most significant restructuring of domestic counterterrorism architecture in recent years. But both new bodies are analytical and advisory in function — neither is empowered to detect, track, or physically intercept a commercially available drone carrying a chemical or biological payload over an urban area, which is precisely the threat Japan’s own officials say they are preparing for.
The structural gap at the center of Monday’s announcement — an advisory layer added to a threat that requires an operational response — is the defining tension of Japan’s new counterterrorism posture.
Kihara Did Not Mince Words
Chief Cabinet Secretary Minoru Kihara convened Monday’s Tokyo meeting at the Prime Minister’s Office, issuing a direct warning to a country that has long operated under a cultural presumption of relative insulation from international terrorism. “We can’t rule out the possibility that our country will be a target of terrorism in the future,” Kihara told assembled officials, ordering relevant ministries and agencies to move quickly. His accompanying instruction to implement measures protecting the public from terrorism signals that Tokyo views the threat as both credible and urgent — not abstract or distant.
What makes the warning notable is what it is implicitly acknowledging: that the threat environment has shifted in ways the existing policy architecture was not designed to address.
Why Drones Change Everything the 1995 Doctrine Assumed
To understand what Japan is responding to in 2026, you need to understand what it responded to in 1995 — and why those two threat pictures are no longer the same.
On the morning of March 20, 1995, five members of the Aum Shinrikyo cult carried plastic bags of liquid sarin onto five Tokyo subway lines during rush hour, puncturing the bags with umbrella tips before exiting the trains. The 1995 Tokyo subway attack used an agent that was only approximately 30 percent pure, meaning the death toll of twelve people — and the more than 5,000 who sought medical attention, including 984 who were moderately poisoned and 54 severely poisoned — could have been catastrophically higher with a more refined synthesis. The attack exposed catastrophic gaps in emergency coordination: trains were allowed to continue on scheduled routes for roughly 40 minutes after the problem was first detected; hospitals near the affected stations received no official notification of what had occurred, learning the agent’s identity from television approximately two and a half hours after the first victims arrived at their doors.
That attack became the baseline for Japanese CBRNE policy. And it was based on a specific threat model: a small group of attackers physically present on a transit system, carrying a liquid agent, operating on foot.
The 2026 threat model looks different. Agricultural spray drones — commercially available and capable of carrying liquid payloads in excess of 16 kilograms (35 lbs) — were originally designed for pesticide dispersal over large areas. As the Association of the U.S. Army noted in its foundational commercial UAV threat analysis, research and development of commercial unmanned aircraft systems for agriculture “demonstrate that this is now an accessible dual-use technology that can realistically deliver [chemical or biological warfare] agents.” A credibly weaponized drone delivers its payload from altitude, at standoff, without requiring physical transit-system access or the attacker’s physical presence at the dispersal site. That is not the threat Aum Shinrikyo’s 1995 attack trained Japanese emergency planners to counter.
The CBRN Defense Market’s June 2026 analysis put the shift bluntly: “The threat of chemical, biological, radiological, and nuclear (CBRN) attacks has never been more operationally relevant than it is in 2026” — specifically citing drone-delivered irritant agents on the Ukrainian battlefield as evidence the threat environment has fundamentally changed.
What Monday’s Action Plan Actually Contains
The action plan is structured around four interconnected pillars:
An expert advisory panel composed of medical doctors, academic researchers, and former officers from the Self-Defense Forces and National Police Agency who previously held anti-terrorism portfolios. The panel is expected to be established to advise a prime-minister-headed antiterrorism headquarters that will be stood up in the event of an actual attack. Its function will be to assess potential damage and advise on countermeasures. This panel responds directly to the most widely documented failure of 1995: the absence of physicians or scientific experts in the command loop during the attack’s first critical hours.
Strengthened intelligence functions. The plan calls for expanded collection and analysis of intelligence related to CBRNE threats. Officials have not publicly detailed which agencies will lead those efforts or what new authorities are being granted. Japan’s new National Intelligence Bureau — launched on July 31, 2026, as the country’s first centralized foreign intelligence coordinating body since World War II — provides the existing framework into which CBRNE threat intelligence can be routed.
Medical system improvements. The action plan includes provisions to upgrade medical care infrastructure for CBRNE incidents, including securing critical medical supplies. This pillar draws directly on 1995: hospitals received no official notification about the subway attack and were forced to delay treatment protocols for hours.
A cross-ministry drone and AI intelligence tracking body. This is the plan’s most forward-looking element. An interagency panel is set to collect and analyze information specifically on drones and artificial intelligence tools that could be weaponized for terrorist purposes. This body is intelligence-focused — tracking what exists, what is technically capable, and what is being acquired by potential threat actors. It is not an operational interdiction body.
What the New Bodies Cannot Do
Neither new entity announced Monday will have authority to physically detect a drone carrying a CBRNE payload over an urban Japanese city, track it through a dense radio-frequency environment that creates radar-detection challenges, and intercept it before it disperses its payload.
That capability sits in a different institutional domain. Japan’s Self-Defense Forces are trialing vehicle-mounted laser systems under Kawasaki and Mitsubishi counterdrone contracts of ¥1.5 billion (approximately $9.4 million) and ¥1.9 billion (approximately $12 million) respectively. The Ground Self-Defense Force established new unmanned warfare offices in April 2026, primarily to institutionalize offensive and defensive drone use in military contexts. Japan and the United States conducted joint counterdrone training at Yakima Training Center in November 2025, focused on small UAS detection and interdiction.
All of this is military. None of it is directly linked to the civilian counterterrorism apparatus that Monday’s action plan is designed to strengthen.
The gap is structural, and it is not unique to Japan. The National Tactical Officers Association’s April 2026 whitepaper on UAS threats at public events specifically documents that CBRNE response capabilities at major public events must be pre-positioned on-site or within rapid-response range to address potential drones carrying hazardous payloads — because the detection-to-interception timeline for small commercial UAS in urban environments, with current civilian law enforcement tools, is inadequate if the response begins after the drone is already in flight.
Japan’s new advisory panel will have expertise. Japan’s new tracking body will have intelligence. What the action plan as announced does not specify is how those capabilities connect to an operational interdiction chain if a drone carrying sarin or anthrax is identified as airborne over a Japanese city.
A Policy Lineage, Not an Emergency Reaction
Monday’s announcement did not emerge from a crisis. Under Prime Minister Sanae Takaichi — who took office in October 2025 and has made technology-driven defense modernization the organizing framework of her security agenda — the government reorganized an existing counterterrorism panel in January 2026 to begin considering further CBRNE measures, driven specifically by concerns over advances in science and technology. That January reorganization fed into the action plan adopted Monday, giving the new framework a more deliberate policy lineage than emergency-reactive measures would suggest.
Takaichi’s broader security posture — codified in the 2026 Defense White Paper adopted by the Cabinet on August 4 — has consistently framed emerging technologies as both the central threat and the central opportunity of Japan’s current strategic moment. The White Paper introduces a dedicated chapter on “new forms of warfare,” highlighting drones and AI as central components of future military operations in Japan. The CBRNE action plan sits alongside, and shares conceptual framing with, that broader military modernization — but the two operate in different institutional channels.
Takaichi’s AI governance agenda is also relevant context. The Congressional Research Service’s July 2026 Japan defense analysis documented that the Takaichi administration is preparing a revised national security strategy by end of 2026 expected to include AI as a defense planning pillar — a framework that will eventually need to account for AI-enabled drone threats in the domestic counterterrorism context as well as the military one.
Japan’s Multilateral Track: From Quad to UN
The domestic action plan did not develop in isolation. Japan has been an active participant in precisely the multilateral counterterrorism architecture that has been raising alarms about commercial drone threats for the past two years.
The Quad Counterterrorism Working Group — comprising Japan, the United States, Australia, and India — hosted its second meeting in Tokyo in November 2024, conducting a tabletop exercise specifically on “countermeasures against the use of ICTs, chemical, biological, radiological, and nuclear (CBRN) agents and emerging technology for terrorist purposes.” In September 2025, India hosted two Quad CTWG workshops specifically on “countering the use of unmanned aerial vehicles (UAVs) for terrorist purposes,” as State Department’s third CTWG statement confirmed. The third CTWG meeting, in New Delhi in December 2025, committed partners to a counterterrorism tabletop exercise focused on state-sponsored terrorism threats and uncrewed aerial vehicles — conducted in Australia in June 2026.
Separately, the UN Security Council Counter-Terrorism Committee Executive Directorate conducted a follow-up assessment visit to Japan from February 24 to 27, 2026, reviewing Japan’s implementation of counterterrorism resolutions and examining specifically the role of information and communications technology in counterterrorism efforts. Monday’s action plan is, among other things, a domestic institutional response to the pressure that multilateral engagement has been generating.
Can the New Machinery Prove Adequate?
The immediate task for the expert panel will be to stand up its advisory function and begin producing guidance for the prime-ministerial antiterrorism headquarters before a crisis forces improvisation. The interagency drone and AI tracking body faces the more open-ended challenge of developing collection and analytical frameworks for technology categories that evolve faster than policy typically can.
Both structures are advisory and analytical rather than operational. Their practical impact will depend heavily on how well their outputs feed into the agencies — the SDF, National Police Agency, Fire and Disaster Management Agency, and relevant ministries — that would actually execute a response. And it will depend on whether Japan develops, in parallel, the operational counterdrone layer that neither Monday’s announcement nor the existing military drone programs directly address for civilian urban CBRNE scenarios.
For a country that spent decades treating terrorism as a distant foreign problem before 1995 forced a reckoning, Monday’s action plan represents a further institutionalization of the lesson that preparedness cannot be deferred. Whether an advisory apparatus adequately answers a threat that requires interdiction capability is the harder question — and it is the one that Monday’s announcement, for all its comprehensiveness, leaves open.
Frequently Asked QuestionsWhat is CBRNE, and why does Japan’s action plan single out drones and AI?
CBRNE stands for chemical, biological, radiological, nuclear, and explosive — a category of weapons and hazardous materials defined by their mass-casualty potential. Japan’s policy has been shaped since 1995 by the Aum Shinrikyo subway attack, which used sarin delivered manually by attackers physically present on the trains. Drones and AI are specifically called out because they represent a delivery paradigm shift: a commercially available agricultural spray drone can carry liquid agents over 16 kilograms (35 lbs), disperse them from altitude across a wide area, and do so without requiring the attacker to be physically present. That is a fundamentally different operational challenge from the 1995 scenario, as documented in the AUSA’s commercial UAS threat analysis.
What does the new expert advisory panel actually do, and who sits on it?
The expert panel is expected to be established as an advisory body to the prime-minister-headed antiterrorism headquarters that would be activated in the event of an actual CBRNE attack. Its membership will include medical doctors, academic researchers, and former officers from the Self-Defense Forces and National Police Agency with prior counterterrorism portfolios. Its function will be to assess potential damage and advise on countermeasures — filling the specific gap the 1995 attack exposed: there were no physicians or CBRNE scientists in Japan’s emergency command loop during the critical first hours after the subway attack.
Can Japan’s new drone and AI tracking body intercept a weaponized drone?
No. The cross-ministry body announced Monday is an intelligence function: it will collect and analyze information on drones and AI tools that could be weaponized for terrorist purposes. Detection, tracking, and physical interdiction of a commercial drone carrying a chemical or biological payload over an urban area is an operational problem that requires different institutional authority and different hardware — neither of which is addressed in Monday’s announcement. Japan’s Self-Defense Forces are developing counterdrone laser systems and have conducted joint US-Japan counterdrone training, but those capabilities are primarily in the military domain. The NTOA’s April 2026 UAS whitepaper documents that the civilian counterterrorism CBRNE-interdiction link remains a gap in the architecture.
How does this action plan connect to Japan’s broader defense buildup under Prime Minister Takaichi?
The CBRNE action plan shares conceptual framing with the Takaichi government’s 2026 Defense White Paper, adopted August 4, which specifically identifies drones and AI as “new forms of warfare” requiring urgent attention. Takaichi’s administration has simultaneously launched Japan’s first centralized foreign intelligence coordinating body (the National Intelligence Bureau, July 31, 2026), enacted the country’s most significant arms export reform in decades (April 2026), and is preparing a revised national security strategy that is expected to include AI as a defense planning pillar by year-end. The CBRNE action plan is domestic counterterrorism; the defense buildup is external; but both operate under the same framework that treats emerging commercial technologies — particularly drones and AI — as the central organizing challenge of Japan’s current strategic moment, as Stars and Stripes reported.