Trump plan taps US firms to fight foreign cybercrime
Trump signed a memorandum allowing vetted private U.S. companies to conduct cyber operations against foreign criminal organizations under oversight.
TL;DR
- The U.S. government will now authorize vetted private companies to conduct cyber operations against foreign criminal organizations.
- Companies can perform Cyber Surveillance Operations (intelligence gathering) and Cyber Effects Operations (disruption/destruction of systems).
- These operations are directed and overseen by the federal government, requiring approval from the DOJ or DHS.
- Targets are defined as Cyber-Enabled Transnational Criminal Organizations (CE-TCOs), excluding entities directly part of foreign governments.
- Safeguards are in place to prevent and manage accidental targeting of U.S. persons or systems.
- Operations likely to result in loss of life or serious injury ('Critical Outcomes') are prohibited.
- Detailed operating procedures are still being developed, with a 60-day deadline for initial rules.
- Personal cybersecurity practices remain essential for individuals, as this program operates largely behind the scenes.