Trump plan taps US firms to fight foreign cybercrime

A new U.S. National Security Presidential Memorandum allows vetted private companies to conduct cyber operations against foreign cyber-enabled criminal organizations under federal direction and oversight. These operations can involve secret intelligence collection or manipulating, disrupting, denying access to, degrading, or destroying targeted digital infrastructure. The program establishes clear definitions for targets and includes safeguards against accidentally impacting U.S. persons or systems, with strict limitations on operations likely to result in loss of life or serious injury.

• The U.S. government will now authorize vetted private companies to conduct cyber operations against foreign criminal organizations.
• Companies can perform Cyber Surveillance Operations (intelligence gathering) and Cyber Effects Operations (disruption/destruction of systems).
• These operations are directed and overseen by the federal government, requiring approval from the DOJ or DHS.
• Targets are defined as Cyber-Enabled Transnational Criminal Organizations (CE-TCOs), excluding entities directly part of foreign governments.
• Safeguards are in place to prevent and manage accidental targeting of U.S. persons or systems.
• Operations likely to result in loss of life or serious injury (‘Critical Outcomes’) are prohibited.
• Detailed operating procedures are still being developed, with a 60-day deadline for initial rules.
• Personal cybersecurity practices remain essential for individuals, as this program operates largely behind the scenes.