; and (II) the sharing with or releasing to appropriate non-Federal entities of information about vulnerabilities that may be shared or released in a manner consistent with the national security interests of the United States following review under subclause (I). (ii) In case of later becoming publicly known (I) In general In the case of a vulnerability that was not publicly known and determined not to be shareable or releasable pursuant to clause (i)(I) and then subsequently becomes publicly known, the vulnerability shall not be subject to the process established under paragraph (3)(A) and shall be subject to such other Federal procedures and inter-agency operation processes as may be applicable, such as procedures and processes established to carry out the Cybersecurity Information Sharing Act of 2015 ( 6 U.S.C. 1501 et seq.). (II) Applicability to classified material In this clause, subparagraph (B) of subsection (a)(2) shall not apply. (e) Compliance Each head of a Federal agency shall ensure that the agency complies with the policies issued by the Board under this section. (f) Oversight (1) Annual reports by Board (A) In general Not less frequently than once each year, the Board shall submit to the appropriate committees of Congress a report on the activities of the Board and the policies issued under subsection (d). (B) Contents In addition to information about the activities and policies described in subparagraph (A), the report required by such subparagraph shall also include the following: (i) The frequency of meetings held by the Board. (ii) The aggregate number of vul­ner­a­bil­i­ties reviewed by the Board. (iii) The number of vulnerabilities determined by the Board to be shareable or releasable. (iv) The number of vulnerabilities determined by the Board not to be shareable or releasable. (v) Such other matters as the Board considers appropriate. (C) Availability to the public For each report submitted under subparagraph (A), the Board shall make an unclassified version of the report available to the