; and (2) entering into the contract improves the cybersecurity and data security of covered products. (f) Program evaluation (1) In general Not later than 4 years after the date of enactment of this Act, and not less frequently than every 2 years thereafter, the Inspector General of the Department of Commerce shall evaluate the Cyber Shield program. (2) Requirements In conducting an evaluation under paragraph (1), the Inspector General of the Department of Commerce shall— (A) evaluate the extent to which the cybersecurity and data security benchmarks established under the Cyber Shield program address cybersecurity and data security threats; (B) assess how the benchmarks have evolved to meet emerging cybersecurity and data security threats; (C) conduct covert testing to evaluate the integrity of certification testing; and (D) assess the costs to businesses of participating in the Cyber Shield program. 5. Cyber shield digital product portal (a) In general The Secretary shall make publicly available on the website of the Department of Commerce in a searchable format— (1) a web page providing information about the Cyber Shield program; and (2) a database of covered products certified under the Cyber Shield program. (b) Requirements The database established under subsection (a) shall include— (1) the cybersecurity and data security benchmarks for each product category; and (2) for each covered product certified under the Cyber Shield program— (A) the certification for the product; (B) the name and manufacturer of the product; (C) the contact information for the manufacturer; (D) the functionality of the product; (E) the location of any applicable privacy policy; and (F) any other information the Secretary determines necessary and appropriate. 6. Rule of construction The decision of a manufacturer of a covered product not to participate in the Cyber Shield program shall not affect the liability of the manufacturer for a cybersecurity or data security breach of that covered product.