; and (ii) information on the date, time, and nature of such consultation. (C) Notice and comment Before issuing any public report described in subparagraph (A), the Director shall provide a period of 90 days for public notice and comment on the report. (3) Cybersecurity plan (A) In general The Office shall develop and implement a cybersecurity plan that uses appropriate safeguards that are adequate to protect the integrity and confidentiality of the data in the possession of the Office. (B) GAO review The Comptroller General of the United States shall annually audit the cybersecurity plan and its implementation described in subparagraph (A). .