In a move aimed at safeguarding national security, the Biden administration is preparing to issue an order that would prohibit US companies and citizens from using software developed by major Russian cybersecurity firm, Kaspersky Lab, according to five US officials familiar with the matter.

The order, which is currently being finalized and could be implemented later this month, would make use of newly established authorities within the Commerce Department. These authorities are based on executive orders signed by both Presidents Joe Biden and Donald Trump and would prohibit Kaspersky Lab from providing certain products and services to entities in the US.

While Kaspersky Lab software is already banned for use by US government agencies, this potential order would mark an unprecedented step in preventing private companies from utilizing the software. The sources caution that nothing is final until it is officially announced, but the Commerce Department has reportedly made an "initial determination" to prohibit specific transactions between the Russian company and US individuals.

The primary objective of this order is to mitigate any risks posed to critical US infrastructure, according to sources familiar with the policy process. Although the full scope of the order is not yet detailed, it is expected to concentrate on the firm's anti-virus software. Kaspersky Lab, which boasts more than 400 million users worldwide, declined to respond to questions regarding the potential prohibition or its market share in the US.

US officials have long raised concerns that the Russian government could exploit Kaspersky Lab software to access data or engage in hacking or surveillance activities targeting Americans. Kaspersky Lab has vehemently denied these allegations. Under US law, the company can appeal an "initial determination" or negotiate an agreement with the government to alleviate security concerns before any final ruling is announced.

Commerce Department officials will need to carefully consider the practicality and enforceability of this regulation. It would be counterproductive, for instance, to force small businesses unrelated to national security to uninstall Kaspersky software if it causes disruption.

The pending action against Kaspersky Lab signifies a new approach in which the Commerce Department takes a more proactive stance in protecting national security, according to experts. The Department aims to use its authorities in the most precise manner to address security concerns while minimizing adverse impacts on American businesses and consumers.

Kaspersky Lab, founded in Moscow in 1997, is recognized globally for its anti-virus software. However, suspicions from US officials have circled around the founder, Eugene Kaspersky, due to his background in cryptography and his past role as a software engineer at a Russian Ministry of Defense institute. The company has strongly denied any unauthorized ties or affiliations with the Russian government.

This potential order follows the Trump administration's directive in 2017, which required US federal civilian agencies to remove Kaspersky Lab software from their networks. The anticipated move by the Biden administration goes a step further, employing Commerce Department authorities to limit private companies from using Kaspersky Lab software.

The Commerce Department's regulatory powers, established in executive orders signed by Biden and Trump, aim to protect Americans' personal data from "foreign adversaries." The department can review and prohibit transactions involving information and communications technology supply chains deemed risky.

The Wall Street Journal had reported last year that Commerce was considering restricting the use of Kaspersky Lab software, but no decision had been made at the time. After months of internal deliberation, US officials are now preparing to implement the order.

As the Biden administration takes decisive action to secure the nation's technology landscape, industries with ties to foreign adversaries are urged to take note of the potential consequences. The Commerce Department is committed to adopting measures that address national security risks without adversely affecting American businesses and consumers.