develop, maintain, and execute a written plan for identifying and reducing cybersecurity risks to the motor vehicle safety of such vehicles and systems. (2) Requirements The plan required under paragraph (1) shall include a process for— (A) the risk-based prioritized identification and protection of safety-critical vehicle control systems and the broader transportation ecosystem, as applicable