Office of Information and Communications Technology and Services (OICTS)

The Office of Information and Communications Technology and Services (OICTS) is responsible for implementing the Information and Communications Technology and Services (ICTS) Program for the Department of Commerce.

The ICTS program implements four Executive Orders (EOs) and its related regulations under the International Emergency Economic Powers Act (IEEPA):”:

1. EO 13873, “Securing the Information and Communications Technology and Services Supply Chain,” (May 15, 2019) delegated to the Secretary of Commerce broad authority to prohibit or impose mitigation measures on any ICTS Transaction subject to United States jurisdiction that poses undue or unacceptable risks to the United States.
   
   
2. 15 C.F.R. Part 7, “Securing the Information and Communications Technology and Services Supply Chain“ is the implementing regulation for EO 13873 and establishes the scope of an ICTS Transaction and creates a process for reviewing ICTS Transactions the Department or other agencies (through referrals) believe may pose an undue or unacceptable risk.  The Department can, on its own accord or upon referral, investigate ICTS Transactions. Ultimately, the Secretary can prohibit or mitigate ICTS Transactions if those transactions pose one of the three risks outlined in EO 13873.
   
   
3. EO 13984, “Taking Additional Steps to Address the National Emergency With Respect to Significant Malicious Cyber-Enabled Activities” directs the Secretary of Commerce to propose rules to address malicious cyber actors’ use of Infrastructure as a Service (IaaS), by proposing “know your customer” (KYC) requirements.
   
   
4. EO 14034, “Protecting Americans’ Sensitive Data from Foreign Adversaries” (June 11, 2021) builds upon EO 13873 to address threats posed by connected software applications linked to foreign adversaries.
   
   
5. EO 14110, “Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence” (October 30, 2023), builds on E.O. 13984, directing the Secretary of Commerce to impose record keeping requirements on IaaS providers when transacting with a foreign person to train certain large AI models.