The Secretary of Defense shall prescribe regulations to implement the authority provided in this subchapter. Such regulations shall be consistent with this subchapter and shall at a minimum—

((1)) specify all elements of the Department of Defense who are authorized to engage in commercial activities pursuant to this subchapter;

((2)) require the personal approval of the Secretary or Deputy Secretary of Defense for all sensitive activities to be authorized pursuant to this subchapter;

((3)) specify all officials who are authorized to grant waivers of laws or regulations pursuant to , or to approve the establishment or conduct of commercial activities pursuant to this subchapter;

((4)) designate a single office within the Department of Defense to be responsible for the oversight of all activities authorized under this subchapter;

((5)) require that each commercial activity proposed to be authorized under this subchapter be subject to appropriate legal review before the activity is authorized; and

((6)) provide for appropriate internal audit controls and oversight for such activities.