; and (ii) not less than 0.1 percent and not more than 1 percent, with respect to biennial implementation grants. (2) Considerations for funding allocations In determining a funding allocation under paragraph (1) for a State, the Secretary shall consider each of the following factors: (A) The considerations described in section 1809(h)(1) of the Homeland Security Act of 2002 ( 6 U.S.C. 579(h)(1) ) with respect to the State, and the degree of exposure of the State and protected government entities within the State to threats, vulnerabilities, or consequences resulting from cybersecurity risks or incidents. (B) The degree of exposure of the State and protected government entities within the State to threats, vulnerabilities, or consequences resulting from cybersecurity risks or incidents. (C) The effectiveness of, relative to evolving cyber threats against, cybersecurity assets, secure communications capabilities, and data network protections, of the State and its partners. (D) The extent to which the State is vulnerable to cyber threats because it has not implemented best practices such as the cybersecurity framework developed by the National Institute of Standards and Technology. (E) The extent to which a State government may face low cybersecurity workforce supply and high cybersecurity workforce demand, as identified by the National Institute of Standards and Technology (i) Review Committee for Cyber Resiliency Grants (1) Establishment There is established a committee to be known as the Review Committee for Cyber Resiliency Grants (in this section referred to as the Review Committee ). (2) Consideration of submissions The Secretary shall forward a copy of each cyber resiliency plan submitted for approval under subsection (d)(1) , each application for an additional planning grant submitted under subsection (e)(3) , and each application for a biennial implementation grant submitted under subsection (d)(1) to the Review Committee for consideration under this subsection. (3) Duties The Review Committee shall— (A)