under subsection (a). (c) Removal from list To be removed from the list described in subsection (a), a covered contractor may submit a request to the Secretary in such manner as the Secretary determines appropriate. The Secretary, in consultation with the Director of National Intelligence, shall determine a process for removing covered contractors from the list, as appropriate, and publicly disclose such process. (d) Waivers (1) In general The President or the Secretary may waive the requirements under subsection (b) if the President or the Secretary determines that such waiver is justified for national security reasons. (2) Waiver for overseas operations The Secretary may waive the requirements under subsection (b) for United States diplomatic posts or diplomatic personnel overseas if the Secretary, in consultation with the Director of National Intelligence, determines that no suitable alternatives are available. (e) Covered contractor defined In this section, the term covered contractor means a provider of telecommunications, telecommunications equipment, or information technology equipment, including hardware, software, or services, that has knowingly assisted or facilitated a cyber attack or conducted surveillance, including passive or active monitoring, carried out against the United States by, or on behalf of, any government, or persons associated with such government, listed as a cyber threat actor in the intelligence community’s 2017 assessment of worldwide threats to United States national security or any following worldwide threat assessment of the intelligence community. (f) Effective date This section shall apply with respect to contracts of a covered contractor entered into on or after the date of the enactment of this Act. 508. Report on contracts with Kaspersky Labs and Huawei (a) Determination Not later than 90 days after the date of the enactment of this Act, the Secretary shall develop a process and timeframe for determining whether or not the Department purchased software, hardware, or