; (B) the Office of Science’s Advanced Scientific Computing Research program; (C) the Office of Small Business Innovation Research/Small Business Technology Trans­fer programs; (D) the Office of Technology Transitions; and (E) other offices considered appropriate by the Secretary. (2) The National Science Foundation. (3) The Department of Homeland Security’s Science and Technology Directorate. (4) The National Institute of Standards and Technology. (5) The National Aeronautics and Space Administration’s Human Research Program. (6) The Office of Science and Technology Policy. (7) The Federal Energy Regulatory Commission. 9. Reports to Congress (a) Identification of common factors in cyber attacks (1) Study The Secretary, in collaboration with the Secretary of Homeland Security, other appropriate Federal agencies, and energy sector stakeholders, shall conduct a study to analyze cyber attacks on electricity sector industrial control systems and identify cost-effective opportunities to improve cybersecurity. (2) Critical electric infrastructure information Incident data provided to Federal agencies for the purposes of carrying out this subsection shall be considered critical electric infrastructure information and provided the protections established in section 10. (3) Content The study shall— (A) summarize cyber incident data provided to the Secretary by relevant Federal agencies and energy sector stakeholders; (B) analyze processes, operational procedures, and other factors common among cyber attacks; (C) identify the points where human behavior played a critical role in maintaining or compromising the security of the system; (D) recommend— (i) changes to the design of devices, human-machine interfaces, technologies, and tools to optimize security that do not require a change in human behavior; (ii) changes to processes or operational procedures that do not require a change in human behavior