Trump turns to private sector in offensive hacking operations memo
Trump signed a national security memorandum authorizing vetted private companies to conduct offensive cyber operations against transnational criminal organizations under federal oversight.
The memorandum creates a federal coordination center program authorizing 'Participating Companies' to conduct Cyber Surveillance Operations and Cyber Effects Operations against foreign cyber-enabled transnational criminal organizations. Participating firms must contract with the Justice Department or Department of Homeland Security, undergo vetting, and comply with existing laws including the Computer Fraud and Abuse Act. The White House cited sustained fraud and cyber-enabled campaigns from TCOs as justification, building on a March fraud-focused executive order. Experts including Veracode co-founder Chris Wysopal called it a major shift in U.S. cyber policy, though it stops short of broader 'hack back' proposals.
- Memo establishes a program for vetted private companies to conduct offensive cyber operations against transnational criminal organizations.
- Participating companies must sign contracts with DOJ or DHS and operate under federal control and oversight.
- Operations must adhere to existing laws, including the Computer Fraud and Abuse Act.
- Companies may sign commercial agreements to share threat information with other private sector entities.
- Experts call it a major policy shift but note it stops short of full 'hack back' authorization.
From the original article
3 min read at cyberscoop.com
One expert called it a “pretty big shift in U. S. cyber policy,” and there have been reservations in the past about opening the door to private sector involvement in cyber offense.
By @gregotto · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.