; ; (B) in subparagraph (E), by inserting , including threat information from other relevant Federal agencies and field offices, as appropriate before the semicolon at the end; and (C) in subparagraph (I), by striking target and inserting core ; and (2) in paragraph (2), by striking target and inserting core . (b) Review Not later than 90 days after the date of the enactment of this Act, the Secretary of Homeland Security, through the Administrator of the Federal Emergency Management Agency, shall review and report to the Committee on Homeland Security and the Committee on Appropriations of the House of Representatives and the Committee on Homeland Security and Governmental Affairs and the Committee on Appropriations of the Senate on the risk formula and methodology used to award grants under sections 2003 and 2004 of the Homeland Security Act of 2002 ( 6 U.S.C. 604 and 605), including a discussion of any necessary changes to such formula to ensure grant awards are appropriately based on risk. 106. Allowable uses Section 2008 of the Homeland Security Act of 2002 ( 6 U.S.C. 609 ) is amended— (1) in subsection (a)— (A) in the matter preceding paragraph (1), by striking target and inserting core ; (B) by redesignating paragraphs (6) through (14) as paragraphs (8) through (16), respectively; (C) by inserting after paragraph (5) the following new paragraphs: (6) enhancing medical preparedness, medical surge capacity, and mass prophylaxis capabilities, including the development and maintenance of an initial pharmaceutical stockpile, including medical kits and diagnostics sufficient to protect first responders, their families, immediate victims, and vulnerable populations from a chemical or biological event; (7) enhancing cybersecurity, including preparing for and responding to cybersecurity risks and incidents (as such terms are defined in section 227) and developing statewide cyber threat information analysis and dissemination activities;