; and (B) the Committee on Armed Services, the Permanent Select Committee on Intelligence, and the Committee on Homeland Security of the House of Representatives. (2) Information technology The term information technology has the meaning given such term in section 11101 of title 40, United States Code. (3) National security system The term national security system has the meaning given such term in section 3552(b) of title 44, United States Code. 1638. Identification of countries of concern regarding cybersecurity (a) Identification of countries of concern Not later than 180 days after the date of the enactment of this Act, the Secretary of Defense shall create a prioritized list of countries of concern regarding cybersecurity based on information relating to the following: (1) A foreign government’s engagement in acts of violence against personnel of the United States or coalition forces. (2) A foreign government’s willingness and record of providing financing, logistics, training or intelligence to other persons, countries or entities posing a force protection or cybersecurity risk to the personnel, financial systems, critical infrastructure, or information systems of the United States or coalition forces. (3) A foreign government’s engagement in foreign intelligence activities against the United States. (4) A foreign government’s direct or indirect participation in transnational organized crime or criminal activity. (5) A foreign government’s ability and intent to conduct operations to affect the supply chain of the United States Government. (b) Report to Congress Not later than one year after the date of the enactment of this Act, the Secretary shall submit to the appropriate committees of Congress the list created pursuant to subsection (a) and any accompanying analysis that contributed to the creation of the list. 1639. Mitigation of risks to national security posed by providers of information technology products and services who have obligations to foreign governments (a) Disclosure required The Department