; (E) consult with the Secretary of Defense and the heads of other departments and agencies that have implemented programs to provide compensation for reports of previously undisclosed vulnerabilities in information systems, regarding lessons that may be applied from such programs; and (F) develop an expeditious process by which an individual, organization, or company can register with the Department, submit to a background check as determined by the Department, and receive a determination as to eligibility; and (G) engage qualified interested persons, including non-government sector representatives, about the structure of the pilot program as constructive and to the extent practicable. (3) Contract authority In establishing the pilot program, the Secretary, subject to the availability of appropriations, may award 1 or more competitive contracts to an entity, as necessary, to manage the pilot program. (c) Report to Congress Not later than 180 days after the date on which the pilot program is completed, the Secretary shall submit to the appropriate congressional committees a report on the pilot program, which shall include— (1) the number of individuals, organizations, or companies that participated in the pilot program, broken down by the number of individuals, organizations, or companies that— (A) registered; (B) were determined eligible; (C) submitted security vulnerabilities; and (D) received compensation; (2) the number and severity of vulnerabilities reported as part of the pilot program; (3) the number of previously unidentified security vulnerabilities remediated as a result of the pilot program; (4) the current number of outstanding previously unidentified security vulnerabilities and Department remediation plans; (5) the average length of time between the reporting of security vulnerabilities and remediation of the vulnerabilities; (6) the types of compensation provided under the pilot program