; (5) an assessment of whether such information system was compromised by a malicious intrusion, including an assessment of— (A) the known or suspected perpetrators, including state actors; (B) the methods used to carry out the incident; and (C) the known or suspected intent of the actors in accessing the information system; and (6) a description of the actions the Department has taken or plans to take, including timelines and descriptions of any progress on plans described in prior reports, to prevent future, similar incidents of such information systems. (g) Inspector General oversight The Secretary shall— (1) notify the Inspector General for the Department of State and the Broadcasting Board of Governors about all planned penetration tests required under subsection (c); and (2) provide the Inspector General for the Department of State and the Broadcasting Board of Governors with any reports, conclusions, or analyses that are a result of such testing. 503. Improving FOIA process (a) Reform plan Not later than 90 days after the date of the enactment of this Act, the Secretary shall submit to the relevant congressional committees a plan that describes the reforms specified in subsection (b). (b) Reforms The Secretary, in consultation with the Director of National Intelligence, shall develop, implement, and complete by the date that is one year after the date of the enactment of this Act a cost-effective plan for training and maintaining an appropriate number of officials of the Department in— (1) the identification of marked or unmarked classified information in documents or media subject to requests under section 552 of title 5, United States Code (commonly referred to as the Freedom of Information Act ), including information originating with the intelligence community