; or (B) is responsible for maintaining the technology, product, system, service, or application. (4) Vulnerability The term vulnerability means a design, configuration, or implementation weakness in a technology, product, system, service, or application that can be exploited or triggered to cause unexpected or unintended behavior. (b) Establishment There is established the Vulnerability Equities Review Board (in this section the Board ). (c) Membership (1) Permanent members The permanent members of the Board consist of the following: (A) The Secretary of Homeland Security, or the designee of the Secretary, who shall be the chair of the Board. (B) The Director of the Federal Bureau of Investigation, or the designee of the Director. (C) The Director of National Intelligence, or the designee of the Director. (D) The Director of the Central Intelligence Agency, or the designee of the Director. (E) The Director of the National Security Agency, or the designee of the Director. (F) The Secretary of Commerce, or the designee of the Secretary. (2) Ad hoc members The Board shall include as members, on an ad hoc basis, the following: (A) The Secretary of State, or the designee of the Secretary, when the Board considers matters under the jurisdiction of such secretary. (B) The Secretary of the Treasury, or the designee of the Secretary, when the Board considers matters under the jurisdiction of such secretary. (C) The Secretary of Energy, or the designee of the Secretary, when the Board considers matters under the jurisdiction of such secretary. (D) The Federal Trade Commission, or the designee of the Commission, when the Board considers matters relating to the Commission. (3) Other participants Any member of the National Security Council under section 101 of the National Security Act of 1947 ( 50 U.S.C. 3021 ) who is not a permanent or ad hoc member of the Board may, with the approval of the President, participate in activities of the Board when requested by the Board. (d) Duties (1) Policies (A) In general The Board shall