to any Internet-connected device in use by the United States Government regarding cybersecurity coordinated disclosure requirements that shall be required of contractors providing such software devices to the United States Government. (2) Contents The guidelines required to be issued under paragraph (1) shall— (A) include policies and procedures for conducting research on the cybersecurity of an Internet-connected device, which shall be based, in part, on Standard 29147 of the International Standards Organization, or any successor standard, relating to the processing and resolving of potential vulnerability information in a product or online service, such as— (i) procedures for a contractor providing an Internet-connected device to the United States Government on how to— (I) receive information about potential vulnerabilities in the product or online service of the contractor