Act of 1947 ( 50 U.S.C. 3021 ) who is not a permanent or ad hoc member of the Board may, with the approval of the President, participate in activities of the Board when requested by the Board. (d) Duties (1) Policies (A) In general The Board shall establish policies on matters relating to whether, when, how, to whom, and to what degree information about a vulnerability that is not publicly known should be shared or released by the Federal Government to a non-Federal entity. (B) Availability to the public To the degree that the policies established under subparagraph (A) are unclassified, the Board shall make such policies available to the public. (C) Draft policies (i) Submittal to Congress (I) In general Not later than 180 days after the date of the enactment of this Act, the Board shall submit to Congress and the President a draft of the policies required by subparagraph (A), along with a description of any challenges or impediments that may require legislative or administrative action. (II) Form The draft submitted under subclause (I) shall be in unclassified form, but may include a classified annex. (ii) Publication Not later than 240 days after the date of the enactment of this Act, the Board shall make available to the public a draft of the policies required by subparagraph (A), to the degree that such policies are unclassified. (2) Requirement The head of each Federal agency shall, upon obtaining information about a vulnerability that is not publicly known, subject such information to the process established under paragraph (3)(A). (3) Process (A) In general The Board shall establish the process by which the Board determines whether, when, how, to whom, and to what degree the Federal Government shares or releases information to a non-Federal entity about a vulnerability that is not publicly known. (B) Considerations The process established under subparagraph (A) shall include, with respect to a vulnerability, consideration of the following: (i) Which technologies, products, systems, services, or