; and (B) the regions that electric utilities serve; (2) prioritize— (A) electric utilities with respect to which the Secretary has substantial concerns; and (B) electric utilities with fewer available resources due to size or region; and (3) to the maximum extent practicable, use and leverage— (A) existing Department of Energy programs; and (B) existing programs of the Federal agencies determined to be appropriate under subsection (a). (c) Protection of information Information provided to, or collected by, the Federal Government pursuant to this section— (1) shall be exempt from disclosure under section 552(b)(3) of title 5, United States Code; and (2) shall not be made available by any Federal agency, State, political subdivision of a State, or Tribal authority pursuant to any Federal, State, political subdivision of a State, or Tribal law, respectively, requiring public disclosure of information or records. 4. Report on cybersecurity and distribution systems (a) In general Not later than 1 year after the date of enactment of this Act, the Secretary, in consultation with State regulatory authorities, industry stakeholders, and any other Federal agencies that the Secretary determines to be appropriate, shall submit to Congress a report that assesses— (1) priorities, policies, procedures, and actions for enhancing the physical security and cybersecurity of electricity distribution systems, including behind-the-meter generation, storage, and load management devices to address threats to, and vulnerabilities of, electricity distribution systems; and (2) the implementation of the priorities, policies, procedures, and actions assessed under paragraph (1), including— (A) an estimate of potential costs and benefits of the implementation; and (B) an assessment of any public-private cost-sharing opportunities. (b) Protection of information Information provided to, or collected by, the Federal Government under this section— (1) shall be exempt from disclosure under section 552(b)(3) of title 5, United States Code