; (2) the number of security violations committed by an employee with a history of one or more prior security violations; and (3) the number and nature of actions taken by the Department in response to security violations, including— (A) disciplinary actions taken or criminal referrals; and (B) the administration of remedial training in response to any security violation or violations. 505. Classified information spillage (a) Detection of classified information spillage Not later than 180 days after the date of the enactment of this Act, the Secretary shall brief the relevant congressional committees on a plan that describes how the reforms described in subsection (b) will be completed within one year after the date of the enactment of this Act. (b) Training program The Secretary, in consultation with the Director of National Intelligence, shall develop or maintain, as the case may be, a training program for appropriate officials reporting to the Under Secretary of Management of the Department regarding best practices for detecting and recognizing classified information spillage, including information originating from the intelligence community. (c) Randomized sampling To detect spillage The officials receiving the training described in subsection (b) shall, not less frequently than quarterly— (1) collect statistically valid random samples of electronic mail sent by or received from employees of the Department who hold a security clearance granting such employees authorized access to information classified at the level of Secret or above