President Barack Obama authorized the first sanctions program directed at individual or group cyberattackers that constitute “significant threats” to the interests of the United States in an executive order issued on Wednesday.

Here’s what constitutes a “significant threat” to America, according to the order: A person or group that threatens the United States’ security or economy by

damaging American critical infrastructure,
disrupting or hijacking American computer networks,
or stealing the trade secrets of American companies or the personal information of American citizens for profit.

“Our primary focus will be on cyber threats from overseas,” Obama wrote in a statement on the website Medium. “In many cases, diplomatic and law enforcement tools will still be our most effective response. But targeted sanctions, used judiciously, will give us a new and powerful way to go after the worst of the worst.” Read more on NBC.