; (2) the number of violations where there was an indication that classified information was compromised or potentially compromised; (3) the number of violations committed by an employee with a history of one or more prior violations; and (4) the number and nature of actions taken by the Department in response to security violations, including— (A) disciplinary actions taken or criminal referrals; and (B) the administration of remedial training in response to any violation or violations. 505. Classified information spillage (a) Detection of classified information spillage Not later than 90 days after the date of the enactment of this Act, the Secretary shall submit a plan to the relevant congressional committees that describes how the reforms described in subsection (b) will be completed within one year after the date of the enactment of this Act. (b) Training program The Secretary, in consultation with the Director of National Intelligence, shall develop a training program for appropriate officials of the Bureau of Diplomatic Security in the best practices for detecting and recognizing classified information spillage, including information originating from the Intelligence Community. (c) Randomized sampling To detect spillage The officials receiving the training described in subsection (b) shall, not less frequently than quarterly— (1) collect statistically valid random samples of electronic mail sent by or received from employees of the Department who hold a security clearance granting such employees authorized access to information classified at the level of Secret or above