agencies and departments of the United States. (2) Contents The plan required by paragraph (1) shall include— (A) an assessment of— (i) the effectiveness of the Hack the Pentagon pilot program carried out by the Department of Defense in 2016 and subsequent bug bounty programs in identifying and reporting vulnerabilities within the information systems of the Department of Defense