Overview
- President Trump signed the National Security Presidential Memorandum on Aug. 12 directing the federal government to let vetted U.S. companies conduct government‑directed cyber surveillance and cyber effects operations against foreign transnational criminal organizations.
- The program will be run by the Homeland Security Task Force’s National Coordination Center with co‑executive directors from the Department of Justice and the Department of Homeland Security who must approve each operation in writing.
- Participating firms must undergo rigorous vetting, contract with DOJ or DHS, post at least $1 million in bond or escrow that can be forfeited for noncompliance, and submit to annual review and operational oversight.
- The memorandum bars operations that would cause ‘critical outcomes’ such as loss of life, requires immediate pause and notification if a U.S. person or U.S.-based system is affected, and places many targeting rules in a classified annex.
- Experts warn the policy raises hard questions about attribution, diplomatic risk and legal exposure for companies and employees, and the program’s real impact will depend on the detailed procedures and targeting guidance the NCC must produce within roughly 60 days.