policy with regard to cyberspace. (b) Elements The strategy required under subsection (a) shall include the following: (1) A review of actions and activities undertaken to support the United States international cyberspace policy described in section 3. (2) A plan of action to guide the diplomacy of the Department of State with regard to foreign countries, including conducting bilateral and multilateral activities to develop the norms of responsible international behavior in cyberspace, and status review of existing efforts in multilateral fora to obtain agreements on international norms in cyberspace. (3) A review of alternative concepts with regard to international norms in cyberspace offered by foreign countries. (4) A detailed description of new and evolving threats to United States national security in cyberspace from foreign countries, State-sponsored actors, and private actors to Federal and private sector infrastructure of the United States, intellectual property in the United States, and the privacy of citizens of the United States. (5) A review of policy tools available to the President to deter and de-escalate tensions with foreign countries, State-sponsored actors, and private actors regarding threats in cyberspace, and to what degree such tools have been used and whether or not such tools have been effective. (6) A review of resources required to conduct activities to build responsible norms of international cyber behavior. (7) A clarification of the applicability of international laws and norms, including the law of armed conflict, to the use of ICT. (8) A clarification that countries that fall victim to malicious cyber activities have the right to take proportionate countermeasures under international law. (c) Form of strategy (1) Public availability The strategy required under subsection (a) shall be available to the public in unclassified form, including through publication in the Federal Register. (2) Classified annex (A) In general If the Secretary of State determines that such is appropriate,