; (2) require the periodic evaluation of the measures described in paragraph (1) for security vulnerabilities using best security practices, including the appropriate application of techniques such as penetration testing, in consultation with the Secretary of Defense, the Secretary of Homeland Security, the Attorney General, the Federal Communications Commission, and the Director of National Intelligence; and (3) require the measures described in paragraph (1) to be periodically updated based on the results of the evaluations conducted under paragraph (2). 5. Managing cybersecurity risks of consumer communications equipment (a) In general The Commercial Aviation Communications Safety and Security Leadership Group established by the memorandum of understanding between the Department of Transportation and the Federal Communications Commission entitled Framework for DOT–FCC Coordination of Commercial Aviation Communications Safety and Security Issues and dated January 29, 2016 (in this section known as the Leadership Group ) shall be responsible for evaluating the cybersecurity vulnerabilities of broadband wireless communications equipment designed for consumer use on board aircraft operated by covered air carriers that is installed before, on, or after, or is proposed to be installed on or after, the date of the enactment of this Act. (b) Responsibilities To address cybersecurity risks arising from malicious use of communications technologies on board aircraft operated by covered air carriers, the Leadership Group shall— (1) ensure the development of effective methods for preventing foreseeable cyberattacks that exploit broadband wireless communications equipment designed for consumer use on board such aircraft