; (B) the degree the critical infrastructure is reliant upon other infrastructure; (C) the cyber preparedness of suppliers, contractors, or service providers of critical infrastructure; (D) programs, projects, or professional development for persons responsible for the security and operation of critical infrastructure; and (E) vulnerabilities and threats that are found in software systems, firewalls, applications, and methods of accessing systems. (3) Membership The research task force shall consist of 19 members appointed by the Secretary. The Secretary shall appoint one member to represent each of— (A) the National Institutes of Standards and Technology; (B) the Association of Computing Machinery; (C) IEEE (formerly the Institute of Electrical and Electronic Engineers); (D) Carnegie Mellon Cylabs; (E) the Edison Electric Institute; (F) the National Telecommunication and Information Administration; (G) the Utilities Telecom Council; (H) the US Oil and Gas Association; (I) the American Chemistry Council; (J) the American Fuel and Petrochemical Manufacturers; (K) the Pharmaceutical Research Manufacturers of America; and (L) the National Oceanic and Atmospheric Administration. (4) Report The research task force shall provide a research report to the Secretary on its findings and recommendations 180 days after its establishment. (5) Critical infrastructure defined In this subsection, the term critical infrastructure means infrastructure of— (A) energy capture, refining, manufacturing, and delivery systems; (B) transportation and transportation systems; (C) water and sewer capture, processing, and delivery systems; (D) healthcare systems, with respect to preventing threats to the quality and safety of medicines, medical devices, and delivery of life-saving health care services; (E) food production, processing, and delivery systems; (F) virtual and physical communication systems; (G) financial systems