; (B) assess the effect such threats may have on the cybersecurity of the information systems and networks of the Federal Government (except for the information systems and networks of the Department of Defense and the intelligence community (as defined in section 3 of the National Security Act of 1947 ( 50 U.S.C. 3003 ))); and (C) develop recommendations for addressing such threats. (4) Report to congress Not later than 1 year after the date of the enactment of this Act, the Secretary shall— (A) complete the study required by paragraph (2); and (B) submit to Congress a report that contains the findings of such study and the recommendations developed.