Trump Signs Memo Allowing Private Firms to Aid in Offensive Cyber Operations

US President Donald Trump has signed a national security presidential memorandum, allowing federal law enforcement agencies to partner with private technology companies to execute offensive cyber operations against foreign criminal groups and international adversaries. The White House stated that the directive aims to give federal authorities broader capabilities to dismantle Transnational Criminal Organisations (TCOs) that pose a growing threat to American citizens, businesses and national security. Under the new policy framework, vetted private sector technology firms will be permitted to work under direct federal supervision to propose, coordinate and execute targeted cyber actions. “These organisations conduct sustained cyber campaigns to perpetrate frauds that undermine American prosperity, security, and freedom,” the memo said, adding, “It is the policy of the US to use all instruments of national power, including the innovative capabilities of the private sector, to combat cybercrime.” Trump enlisting private sector innovation against cybercrime The White House fact sheet accompanying the memorandum highlighted widespread ransomware campaigns, financial fraud schemes and cross-border cyber extortion. To counter these threats, the memorandum directs the Department of Homeland Security (DHS) through the National Coordination Center within the Homeland Security Task Force to establish a specialised operational program. The initiative will be jointly overseen by DHS and the Department of Justice (DOJ), creating a formal bridge between public law enforcement and private technology contractors. Under the framework private firms can form collaborative agreements with federal, state, local, tribal and territorial agencies to collect threat intelligence on foreign networks. Secondly, vetted private partners will be authorised to conduct both “cyber surveillance operations” and “cyber effects operations” against approved foreign targets. The memo defines “cyber effects” as actions that manipulate, disrupt, deny, degrade or destroy digital infrastructure, information systems and physical hardware controlled by targeted organisations. Financial safeguards put in place To ensure accountability and prevent unauthorised activity, participating companies will be required to pass rigorous vetting processes and maintain a financial bond or escrow account of at least $1 million. While the Trump administration framed the partnership as a necessary evolution in national defense, the concept of utilising private technology contractors for offensive digital operations has drawn debate among cybersecurity policy experts.