The Secretary of Defense shall prescribe regulations to implement the authority provided in this subchapter.

Such regulations shall be consistent with this subchapter and shall at a minimum - (1) specify all elements of the Department of Defense who are authorized to engage in commercial activities pursuant to this subchapter; (2) require the personal approval of the Secretary or Deputy Secretary of Defense for all sensitive activities to be authorized pursuant to this subchapter; (3) specify all officials who are authorized to grant waivers of laws or regulations pursuant to section 433(b) of this title, or to approve the establishment or conduct of commercial activities pursuant to this subchapter; (4) designate a single office within the Defense Intelligence Agency to be responsible for the management and supervision of all activities authorized under this subchapter; (5) require that each commercial activity proposed to be authorized under this subchapter be subject to appropriate legal review before the activity is authorized; and (6) provide for appropriate internal audit controls and oversight for such activities.