; (ii) different communication technologies used to move information and data between control system devices, technologies, and system operators; (iii) automated and human-in-the-loop devices and technologies; (iv) programmable versus non­pro­gram­ma­ble devices and technologies; and (v) increased redundancy using dissimilar cybersecurity technologies; (B) recommend methods or metrics to document changes in risks associated with system designs and architectures; (C) provide recommendations for research, development, demonstration, and commercial application activities to address issues raised in subparagraphs (A) and (B); and (D) recommend guidance to minimize overall system risks. (3) Consultation In conducting the study, the Secretary shall consult with electricity sector stakeholders, academic and private sector researchers, private sector industrial control system vendors, and other relevant parties. (4) Report Not later than 24 months after the date of enactment of this Act, the Secretary shall submit to the Committee on Science, Space, and Technology of the House of Representatives and the Committee on Energy and Natural Resources of the Senate a report on the results of the study, including the findings of the Secretary on each of the items described in paragraph (2). 10. Protection of critical electric infrastructure information Any Federal agency that produces information or has information made available to it in the course of carrying out this Act shall determine whether to designate any such information as critical electric infrastructure information. Critical electric infrastructure information— (1) shall be exempt from disclosure under section 552(b)(3) of title 5, United States Code