; and (2) that involve any person determined to be subject to the directive or the property or interests in property of such a person who has a controlling interest or a substantial non-controlling ownership interest in such a project defined as not less than a 33 percent interest. 224. Imposition of sanctions with respect to activities of the Russian Federation undermining cybersecurity (a) In general On and after the date that is 60 days after the date of the enactment of this Act, the President shall— (1) impose the sanctions described in subsection (b) with respect to any person that the President determines— (A) knowingly engages in significant activities undermining cybersecurity against any person, including a democratic institution, or government on behalf of the Government of the Russian Federation; or (B) is owned or controlled by, or acts or purports to act for or on behalf of, directly or indirectly, a person described in subparagraph (A); (2) impose five or more of the sanctions described in section 235 with respect to any person that the President determines knowingly materially assists, sponsors, or provides financial, material, or technological support for, or goods or services (except financial services) in support of, an activity described in paragraph (1)(A)