President Trump has authorised US government agencies to hire private cybersecurity firms for operations against foreign cyber-enabled criminal groups targeting US interests. The move would let vetted contractors conduct covert cyber surveillance and technical disruption of criminal networks, expanding the private sector’s role in national cyber operations while retaining government oversight.

The policy excludes groups directly acting for foreign governments and bars operations likely to cause death, serious injury or an armed attack under international law. Firms must pass rigorous vetting, demonstrate capabilities annually and maintain at least $1 million in bond or escrow, forfeitable for contractual breaches; operational rules are due within 60 days, with the Justice Department involved where domestic legal issues arise.