to Congress a report on such policy and the remediation process required under subsection (c). (B) Annual briefings One year after the date of the submission of the report under subparagraph (A), and annually thereafter for each of the next 3 years, the Secretary shall provide to Congress a briefing on the policy required under subsection (b) and the process required under subsection (c). (C) Matters for inclusion The report required under subparagraph (A) and the briefings required under subparagraph (B) shall include each of the following with respect to the policy required under subsection (b) and the process required under subsection (c) for the period covered by the report or briefing, as the case may be: (i) The number of unique security vulnerabilities reported. (ii) The number of previously unknown security vulnerabilities mitigated or remediated. (iii) The number of unique individuals, organizations, and companies that reported security vulnerabilities. (iv) The average length of time between the reporting of security vul­ner­a­bil­i­ties and mitigation or remediation of such vulnerabilities.