Overview
- The White House signed a National Security Presidential Memorandum on Wednesday that directs the National Coordination Center to stand up a program letting vetted U.S. companies carry out cyber surveillance and offensive “cyber effects” against foreign transnational criminal organizations under federal control.
- Participating firms must pass rigorous vetting, sign contracts with DOJ or DHS, maintain at least $1 million in bond or escrow, and obtain written approval from program executive directors before any operation may proceed.
- The memorandum bars operations likely to cause loss of life, serious injury, or actions that would rise to the level of a use of force, and requires multi‑agency deconfliction and immediate halt and notification if a U.S. person or system is inadvertently targeted.
- Cybersecurity experts warn the plan raises hard questions about reliable attribution, legal exposure for private actors, and the risk of diplomatic or interstate escalation if state‑linked networks are affected.
- Implementation is still unfolding: the NCC and DOJ/DHS executives must write operational procedures and classified targeting rules within 60 days, no companies have been publicly named, and the program builds on a March executive order aimed at curbing cyber‑enabled fraud.