; . (b) Vulnerability assessments and security plans Title 46, United States Code, is amended— (1) in subparagraph (C) of section 70102(b)(1), by inserting cybersecurity, after physical security, ; and (2) in subparagraph (C) of section 70103(c)(3)— (A) in clause (i), by inserting cybersecurity, after physical security, ; (B) in clause (iv), by striking and after the semicolon at the end; (C) by redesignating clause (v) as clause (vi); and (D) by inserting after clause (iv) the following new clause: (v) prevention, management, and response to cybersecurity risks and incidents (as such terms are defined in section 227 of the Homeland Security Act of 2002 ( 6 U.S.C. 148 )); and . 5. Facility inspection intervals Subparagraph (D) of section 70103(c)(4) of title 46, United States Code, is amended to read as follows: (D) subject to the availability of appropriations, verify the effectiveness of each such facility security plan periodically, but not less than one time per year without notice, and more frequently as determined necessary, in a risk based manner, with or without notice to the facility. . 6. Recognition of other countries’ trusted shipper programs (a) In general Section 218 of the Security and Accountability for Every Port Act of 2006 ( 6 U.S.C. 968 ) is amended to read as follows: 218. Recognition of other countries’ trusted shipper programs Not later than 30 days before signing an arrangement between the United States and a foreign government providing for mutual recognition of supply chain security practices which might result in the utilization of benefits described in section 214, 215, or 216, the Secretary shall— (1) notify the appropriate congressional committees of the proposed terms of such arrangement