TRUMP ADMINISTRATION AUTHORISES PRIVATE FIRMS TO CONDUCT CYBER OPERATIONS...

US President Donald Trump has signed a National Security Presidential Memorandum authorising private cybersecurity companies to conduct offensive cyber operations against foreign transnational criminal organisations that target American persons, organisations or government entities. The memo, issued on Thursday, directs the National Coordination Centre, operating under the Homeland Security Task Force, to develop a programme enlisting private sector firms in these operations. The Departments of Justice and Homeland Security will provide oversight of the new initiative, which marks the first time the federal government has explicitly authorised private companies to conduct offensive cyber operations against overseas hackers.

The memo permits participating firms to conduct cyber surveillance operations and cyber effects operations—activities that involve manipulation, disruption, denial, degradation or destruction of information systems controlled by the targeted organisations. Eligible targets include criminal groups engaged in ransomware attacks, sextortion schemes, phishing campaigns, financial fraud and impersonation scams. The definition of cyber-enabled transnational criminal organisations explicitly excludes entities that are institutional parts of foreign governments or wholly operated under a foreign government's direction. Companies participating in the programme will be subject to rigorous vetting and strict operational procedures, which officials must develop within 60 days. Annual evaluations will verify that participating firms maintain the technical capabilities required for such operations.

The new programme represents a significant shift in US policy, as the government previously prohibited private sector cybersecurity operations of this nature without court-authorised approval. Participating companies must undergo rigorous vetting, and programme managers have been instructed to create opportunities for both large, highly resourced organisations and smaller, more agile firms specialising in discrete tasks. The Justice Department will play a role in authorising operations, particularly those with implications for US residents.