; and (2) by adding at the end the following new subparagraph: (C) Subparagraph (A) shall not apply for purposes of determining the eligibility of a State to receive a requirements payment appropriated pursuant to the authorization provided under section 257(a)(5) of this title for fiscal year 2018. . 202. Requiring voting systems to meet cybersecurity standards (a) Requirement Section 301(a) of the Help America Vote Act of 2002 ( 52 U.S.C. 21081(a) ) is amended by adding at the end the following new paragraph: (7) Cybersecurity standards (A) Establishment of standards by Secretary of Homeland Security and NIST Not later than 1 year after the date of the enactment of this paragraph, the Secretary of Homeland Security (hereafter referred to as the Secretary ) and the Director of the National Institute of Standards and Technology (hereafter referred to as the Director ), working jointly, shall establish standards to ensure the cybersecurity of the components of voting systems, including the software used to operate such systems, and to ensure the security of the manufacturing processes for such components. (B) Notification of security breaches The Secretary and the Director shall include in such standards a requirement that the manufacturer of a voting system or any component of a voting system whose information and information systems have been the subject of an incident of unauthorized access, use, disclosure, disruption, modification, or destruction submit a report to the Commission immediately upon discovering the incident. (C) Updates The Secretary and the Director shall, working jointly, regularly update such standards to take into account developments in voting system technology and the emergence of new threats to the security of such systems. (D) Compliance required A State or jurisdiction may not use a voting system or any component of a voting system in an election for Federal office unless the manufacturer of the system or component certifies to the State or jurisdiction that the system meets the most