; (iii) to determine the extent to which stakeholder security programs, policies, and initiatives address the vulnerabilities and risks to maritime transportation systems identified in subsection (a); and (iv) subject to clauses (ii) and (iii), to mitigate each vulnerability and risk to maritime transportation systems identified in subsection (a). (c) Report (1) In general Not later than 180 days after the date the security assessment under subsection (a) is complete, the Administrator shall submit to the appropriate committees of Congress and the Inspector General of the Department a report that— (A) describes the process used to complete the security assessment; (B) describes the process used to develop the risk-based security strategy; (C) describes the risk-based security strategy; (D) includes the management oversight strategy; (E) includes— (i) the findings of the security assessment; (ii) a description of the actions recommended or taken by the Administrator, the Commandant of the Coast Guard, or the head of another Federal department or agency to mitigate the vulnerabilities and risks identified in subsection (a); (iii) any recommendations for improving the coordinated approach to mitigating vulnerabilities and risks to surface and maritime transportation systems; and (iv) any recommended changes to the National Infrastructure Protection Plan, the modal annexes to such plan, or relevant surface or maritime transportation security programs, policies, or initiatives