; (3) the number of previously unidentified security vulnerabilities remediated as a result of the pilot program; (4) the average length of time between the reporting of security vulnerabilities and remediation of the vulnerabilities; (5) the average amount of monetary compensation paid per unique vulnerability submitted under the pilot program and the total amount of monetary compensation paid to computer security researchers under the pilot program; and (6) the lessons learned from the pilot program. (d) Authorization of appropriations There are authorized to be appropriated to the Department $250,000 for fiscal year 2018 to carry out this Act.