; and (2) by inserting after section 303 the following new section: 304. Ensuring no foreign ownership or control over voting systems (a) Requiring vendors To be qualified Each State, unit of local government, or component of a State or unit of local government which is responsible for the administration of an election for Federal office shall ensure that each vendor who provides, supports, or maintains any component of a voting system used in the administration of the election is a qualified voting systems vendor. (b) Annual evaluation To ensure compliance Each State, unit of local government, or component of a State or unit of local government which is responsible for the administration of an election for Federal office shall, not less frequently than once each calendar year, evaluate each of the vendors who provide, support, or maintain any component of a voting system used in the administration of the election to ensure that the vendor is a qualified voting system vendor. (c) Cybersecurity best practices Not later than 90 days after the date of the enactment of this section, the Chair of the Commission and the Secretary of Homeland Security shall establish and publish cybersecurity best practices for vendors who provide, support, or maintain voting systems, and shall establish and publish updates to such best practices at such times as the Chair and the Secretary consider appropriate. (d) Guidance and technical assistance (1) In general The Chair of the Commission and the Secretary of Homeland Security may provide such guidance and technical assistance as may be appropriate to assist each State, unit of local government, or component of a State or unit of local government which is responsible for the administration of an election for Federal office with its obligations under this section. (2) Database of qualified vendors As part of providing guidance and technical assistance under this subsection, the Commission shall establish and maintain a database in which each State, unit of local government, or