10 U.S.C. § 436

(1)

specify all elements of the Department of Defense who are authorized to engage in commercial activities pursuant to this subchapter;

(2)

require the personal approval of the Secretary or Deputy Secretary of Defense for all sensitive activities to be authorized pursuant to this subchapter;

(3)

specify all officials who are authorized to grant waivers of laws or regulations pursuant to section 433(b) of this title , or to approve the establishment or conduct of commercial activities pursuant to this subchapter;

(4)

designate a single office within the Department of Defense to be responsible for the oversight of all activities authorized under this subchapter;

(5)

require that each commercial activity proposed to be authorized under this subchapter be subject to appropriate legal review before the activity is authorized; and

(6)

provide for appropriate internal audit controls and oversight for such activities.