; and (II) the process established under clause (i) is consistent with such standards. (C) Information not determined to be shareable or releasable (i) In general The policies under paragraph (1) shall provide for— (I) the periodic review of vul­ner­a­bil­i­ties that are determined by the Board, pursuant to the process established under paragraph (3)(A), not to be shareable or releasable, in order to determine whether such vul­ner­a­bil­i­ties may be shared or released in a manner consistent with the national security interests of the United States