The Trump administration has formalized a new policy enabling private sector firms to engage in offensive cyber operations against foreign criminal entities. According to a presidential memorandum released on Wednesday, these private entities will be granted authorization to surveil and disrupt criminal networks that operate outside of U.S. borders.

While the government is outsourcing these capabilities, the memorandum specifies that all actions must remain under the direct control and oversight of federal authorities. The Department of Justice (DOJ) and the Department of Homeland Security (DHS) have been tasked with managing the program. To participate, private firms are required to demonstrate high levels of technical proficiency and meet strict security standards, including proven performance in previous cyber operations and facility security requirements.

The initiative represents a shift in how the U.S. approaches international cyber threats, moving toward a public-private partnership model for digital warfare. Proponents suggest this could provide the government with additional resources to combat sophisticated criminal organizations. However, the policy has raised questions regarding the legal implications of private companies conducting what are traditionally considered state-level military or intelligence activities. As of now, the specific criteria for how these firms will be held accountable for potential collateral damage or international legal violations remain under development by the overseeing agencies.