Presidential Memo on Combating Cybercrime and Enhancing Security

US Government Enlists Private Sector to Combat Cybercrime

In a groundbreaking move to bolster national cybersecurity, the US government has officially set forth a directive to integrate private sector capabilities into its fight against cyber-enabled threats posed by transnational criminal organizations (TCOs). The memorandum, endorsed by President Donald J. Trump, seeks to leverage the technological prowess of American businesses to enhance defenses against sophisticated cybercriminals.

Targeting Transnational Cyber Threats

The memorandum outlines a strategic partnership between the federal government and vetted US companies to combat cybercrime. Transnational Criminal Organizations (TCOs) pose a significant risk to American security and prosperity by employing sustained cyber campaigns to commit fraud. The Executive Order 14390 of March 6, 2026, previously initiated actions against such cyber threats, and this latest directive aims to expand those efforts by incorporating private sector innovations.

Establishment of the National Coordination Center

The National Coordination Center (NCC), guided by Executive Order 14159, will oversee a new program authorizing Participating Companies to execute Cyber Surveillance and Cyber Effects Operations against foreign Cyber-Enabled Transnational Criminal Organizations (CE-TCOs). These operations will occur under the strict oversight of the federal government, ensuring lawful investigatory conduct.

Program Executive Directors from both the Department of Justice and the Department of Homeland Security will coordinate the approval of cyber operations. Participating Companies must adhere to rigorous standards through contractual agreements with these departments, ensuring compliance with operational procedures.

Implementing Guidance and Standards

Within 60 days, Program Executive Directors, alongside the Homeland Security Council, are tasked to establish consensus operating procedures ensuring federal oversight and control. Eligibility criteria will allow participation by both large companies and agile small businesses, enhancing the program's capacity for specialized tasks.

Participating Companies must disclose all contractual relationships and maintain a bond or escrow of at least $1 million to ensure compliance. The operational workflow includes coordination across federal departments, ensuring activities target only CE-TCOs while respecting US and international laws.

Regular Assessment and Improvement

The program will undergo continuous assessment for effectiveness and efficiency. Automation will be utilized to streamline processes, and a report on the program's status will be submitted within 180 days and annually thereafter to top government advisors.

Defining Key Terms

The memorandum provides definitions for terms such as "Cyber Effects Operation," which involves activities that manipulate or disrupt information systems, and "Critical Outcomes," defined as actions likely to result in serious harm or international conflict. "Cyber-Enabled Transnational Criminal Organization" denotes foreign groups conducting cybercrime against US interests, and "Cyber Surveillance Operation" relates to collecting intelligence through unauthorized access while remaining undetected.