U.S. considers enlisting private firms for offensive cyberoperations

The Trump administration is weighing a substantial shift in its cyberstrategy by enlisting private companies to assist with offensive cyberattacks, according to four former senior U.S. officials familiar with the administration’s thinking. The proposals have been included in drafts of the administration’s coming National Cybersecurity Strategy, which will set out general priorities and be accompanied by a plan to carry out the policies, the former officials said.

Under current law, private companies are prohibited from conducting offensive online campaigns, though the government can contract firms to develop elements of its cyberoperations. Changing the law to permit private companies to execute offensive cyberattacks would require congressional approval.

Some lawmakers have reintroduced proposals to allow companies to “hack back” when attacked or to repurpose Letters of Marque for cyberspace; a Letter of Marque was last authorized during the Civil War, the report noted. Former military officials and analysts caution the change could risk escalation and disorder unless operations remain under military oversight.

Lt. Gen. Charles L. Moore Jr., a retired deputy commander of U.S.

Key Topics

Politics, Trump Administration, National Cybersecurity Strategy, Cyber Command, National Security Agency, Congress