; and (2) evaluating technology and standards, in partnership with covered entities, to isolate and defend industrial control systems of covered entities from security vulnerabilities and exploits in the most critical systems of the covered entities, including— (A) analog and nondigital control systems; (B) purpose-built control systems; and (C) physical controls. (c) Working group to evaluate program standards and develop strategy (1) Establishment The Secretary shall establish a working group— (A) to evaluate the technology and standards used in the Program under subsection (b)(2); and (B) to develop a national cyber-informed engineering strategy to isolate and defend covered entities from security vulnerabilities and exploits in the most critical systems of the covered entities. (2) Membership The working group established under paragraph (1) shall be composed of not fewer than 10 members, to be appointed by the Secretary, at least 1 member of which shall represent each of the following: (A) The Department of Energy. (B) The energy industry, including electric utilities and manufacturers recommended by the Energy Sector coordinating councils. (C) (i) The Department of Homeland Security; or (ii) the Industrial Control Systems Cyber Emergency Response Team. (D) The North American Electric Reliability Corporation. (E) The Nuclear Regulatory Commission. (F) (i) The Office of the Director of National Intelligence; or (ii) the intelligence community. (G) (i) The Department of Defense; or (ii) the Assistant Secretary of Defense for Homeland Security and America's Security Affairs. (H) A State or regional energy agency. (I) A national research body or academic institution. (J) The National Laboratories. (d) Reports on the Program (1) Interim report Not later than 180 days after the date on which funds are first disbursed under the Program, the Secretary shall submit to the appropriate congressional committees an interim report that— (A) describes the results of the Program