; (2) award a grant to an eligible entity— (A) to provide to not less than 3 qualified hospitals qualified software; and (B) to provide customer service to each such hospital with respect to such qualified software or any associated service; (3) provide to such qualified hospitals any necessary hardware in accordance with subsection (e); and (4) award grants to eligible entities to test the cybersecurity of such qualified hospitals by attempting to attack simulated data on the servers of such hospitals. (b) Eligible entities; application The Director of NIH shall determine whether an entity is eligible to receive a grant under this section and shall select hospitals to be qualified hospitals for purposes of this section. An entity seeking a grant under this section, and a hospital seeking to be so selected, shall submit to the Director of NIH an application in such form and manner and containing such information as the Director of NIH may specify. (c) Data queries The Director of NIH shall establish, for purposes of allowing researchers to process data from a qualified hospital’s servers pursuant to this section, a procedure to determine— (1) who can ask queries of the servers; (2) which data the hospital must include on such servers