; and (B) coordinating device-specific responses to cybersecurity incidents and vulnerabilities with respect to cyber devices. (3) Consultation In carrying out paragraph (2), the Under Secretary shall consult with relevant agencies within the Food and Drug Administration, the Department of Health and Human Services, the National Institute of Standards and Technology, the National Coordination Office for Networking and Information Technology Research and Development, the Federal Trade Commission, and experts in the cybersecurity and medical device industries. (4) Coordinated disclosure Not later than 6 months after the date of enactment of this Act, the Secretary of Homeland Security shall issue rules relating to the coordinated disclosure of controlled and uncontrolled cybersecurity vulnerabilities of cyber devices, which shall— (A) outline the roles and responsibilities of ICS–CERT and manufacturers and providers of cyber devices; (B) provide timelines for all required actions; and (C) provide for the enforcement of cooperation between ICS–CERT and manufacturers and providers of cyber devices. (5) Report Not later than 1 year after the date of enactment of this Act, the Under Secretary shall submit to Congress a report detailing the expanded duties and mission of ICS–CERT under paragraph (2).