; (B) the Committee on Homeland Security and Governmental Affairs and the Committee on Armed Services of the Senate; and (C) the Committee on Homeland Security and the Committee on Armed Services of the House of Representatives. (2) Bug bounty program The term bug bounty program means a program under which an approved computer security specialist or security researcher is temporarily authorized to identify and report vulnerabilities within the information system of an agency or department of the United States in exchange for compensation. (3) Information system The term information system has the meaning given such term in section 3502 of title 44, United States Code. (b) Bug bounty program plan (1) Requirement Not later than 180 days after the date of the enactment of this Act, the Secretary of Homeland Security, in consultation with the Secretary of Defense, shall submit to the appropriate committees of Congress a strategic plan for appropriate agencies and departments of the United States to implement bug bounty programs. (2) Contents The plan required by paragraph (1) shall include— (A) an assessment of— (i) the Hack the Pentagon pilot program carried out by the Department of Defense in 2016 and subsequent bug bounty programs in identifying and reporting vulnerabilities within the information systems of the Department of Defense; and (ii) private sector bug bounty programs, including such programs implemented by leading technology companies in the United States