Because the White Home pushes to accentuate inside leak investigations, Immigration and Customs Enforcement is quietly renewing a cybersecurity contract that governs how worker exercise on company programs is monitored, recorded, and preserved for investigation.
The operation, generally known as Cyber Protection and Intelligence Help Providers, is introduced as a routine safety effort targeted on community monitoring, incident response, and fundamental safety hygiene. However new contract data reviewed by WIRED spell out how ICE is working to broaden and improve the gathering of digital logs and machine information for inside investigations and regulation enforcement use.
Information present ICE is transferring forward with a recompete—the method of reissuing and renewing a serious federal contract—as Division of Homeland Safety management expands leak investigations and steps up monitoring of how workers use company programs. Contract paperwork define strategies for sustaining complete data of digital exercise and utilizing automated instruments to flag patterns and anomalies whereas extra intently linking cybersecurity operations with ICE investigative places of work to hurry using that information in inside casework.
Past insider monitoring, the contract describes a broad cybersecurity operation, masking fixed surveillance of ICE networks, automated alerts for suspicious habits, and routine evaluation of logs pulled from servers, workstations, and cellular gadgets. A core requirement is that this information be saved and arranged so incidents can later be reconstructed step-by-step, whether or not for safety evaluations or formal investigations.
The work is managed by ICE’s Workplace of the Chief Info Officer, which runs the company’s safety operations heart, however the contract is designed to maneuver info throughout places of work. Cyber findings are supposed to be shared with investigative and oversight models, together with Homeland Safety Investigations and ICE’s Workplace of Skilled Accountability, which handles worker misconduct. The construction permits digital exercise information collected for cybersecurity functions to be shortly routed into inside inquiries when investigators request it.
ICE didn’t reply to a request for remark.
The enlargement of inside monitoring comes because the Trump administration has framed dissent inside federal companies as a menace, transferring to aggressively determine and take away profession officers considered as ideologically misaligned with the administration, notably in nationwide safety and regulation enforcement roles.
Since returning to workplace, the Trump White Home has portrayed inside dissent in explicitly loyalty-based phrases—versus misconduct, malfeasance, or efforts to intentionally undermine the federal government—framing political disagreement with the president’s targets as grounds for firing.

