; and (5) provide any provider owning or operating the device with the following information related to the device: (A) Compensating controls on how to securely configure the cyber device if the device stays in operation past the date on which the manufacturer stops providing cybsecurity fixes or updates under subsection (d)(2). (B) Documentation on secure preparation for recycling and disposal of the device. (C) Specific guidance regarding supporting infrastructure architecture, including network segmentation and device isolation requirements. (D) Instructions on how to delete any personally identifiable information, protected health information, or other site-specific sensitive data such as configuration files. (f) Applicability This section shall not apply with respect to any cyber device for which, prior to the enactment of the Medical Device Cybersecurity Act of 2017 , a notification was submitted under section 510(k), or for which an application for premarket approval was submitted under section 515(c). . (b) Enforcement Section 301 of the Federal Food, Drug, and Cosmetic Act ( 21 U.S.C. 331 ) is amended by adding at the end the following: (eee) The failure to comply with subsection (b), (c), (d), or (e) of section 520A. . (c) Expansion of ICS–CERT responsibilities (1) Definitions In this subsection: (A) Cyber device The term cyber device has the meaning given the term in section 520A of the Federal Food, Drug, and Cosmetic Act, as added by subsection (a). (B) ICS–CERT The term ICS–CERT means the Industrial Control Systems Cyber Emergency Response Team of the National Cybersecurity and Communications Integration Center established under section 227 of the Homeland Security Act of 2002 ( 6 U.S.C. 148 ). (C) Under Secretary The term Under Secretary means the Under Secretary appointed under section 103(a)(1)(H) of the Homeland Security Act of 2002 ( 6 U.S.C. 113(a)(1)(H) ). (2) Expansion Not later than 180 days after the date of enactment of this Act, the Under Secretary shall expand the duties and mission of