meaning given the term in section 2 of the Energy Policy Act of 2005 ( 42 U.S.C. 15801 ). (6) Program The term Program means the pilot program established under section 503. (7) Security vulnerability The term security vulnerability means any attribute of hardware, software, process, or procedure that could enable or facilitate the defeat of a security control. 503. Pilot program for securing energy infrastructure Not later than 180 days after the date of enactment of this title, the Director shall establish a 2-year control systems implementation pilot program within the National Laboratories for the purposes of— (1) partnering with covered entities in the energy sector (including critical component manufacturers in the supply chain) that voluntarily participate in the Program to identify new classes of security vulnerabilities of the covered entities