H. R. 2029—730 other systems deployed under subtitle D of title II of the Homeland Security Act of 2002 (6 U.S.C. 231 et seq.) are effective in securing Federal information systems; (iii) the costs and benefits of the intrusion detection and prevention capabilities, including as compared to commercial technologies and tools and including the value of classified cyber threat indicators; and (iv) the capability of agencies to protect sensitive cyber threat indicators and defensive measures if they were shared through unclassified mechanisms for use in commercial technologies and tools. (2) OMB REPORT ON DEVELOPMENT AND IMPLEMENTATION OF INTRUSION ASSESSMENT PLAN, ADVANCED INTERNAL DEFENSES, AND FEDERAL CYBERSECURITY REQUIREMENTS.—The Director shall— (A) not later than 6 months after the date of enactment of this Act, and 30 days after any update thereto, submit the intrusion assessment plan to the appropriate congressional committees; (B) not later than 1 year after the date of enactment of this Act, and annually thereafter, submit to Congress, as part of the report required under section 3553(c) of title 44, United States Code— (i) a description of the implementation of the intrusion assessment plan; (ii) the findings of the intrusion assessments conducted pursuant to the intrusion assessment plan; (iii) a description of the advanced network security tools included in the efforts to continuously diagnose and mitigate cybersecurity risks pursuant to section 224(a)(1); and (iv) a list by agency of compliance with the requirements of section 225(b); and (C) not later than 1 year after the date of enactment of this Act, submit to the appropriate congressional committees— (i) a copy of the plan developed pursuant to section 224(a)(2); and (ii) the improved metrics developed pursuant to section 224(c). (d) FORM.—Each report required under this section shall be submitted in unclassified form, but may include a classified annex. SEC. 227. TERMINATION. (a) IN GENERAL.—The authority provided under section 230 of the Homeland Security Act of 2002, as added by section 223(a)(6) of this division, and the reporting requirements under section 226(c) of this division shall terminate on the date that is 7 years after the date of enactment of this Act. (b) RULE OF CONSTRUCTION.—Nothing in subsection (a) shall be construed to affect the limitation of liability of a private entity for assistance provided to the Secretary under section 230(d)(2) of the Homeland Security Act of 2002, as added by section 223(a)(6) of this division, if such assistance was rendered before the termination date under subsection (a) or otherwise during a period in which the assistance was authorized.