or assisting in recovery from cybersecurity incidents involving critical infrastructure and make the directory available on a voluntary basis to critical infrastructure owners and operators. (7) Establish a voluntary incident access portal with the ability to allow users to determine the means, methods, and level of incident reporting that is sector-specific and relevant to the recipient as defined and controlled by the recipient. (8) Gather voluntary feedback from critical infrastructure owners and operators on the value, relevance, and timeliness of the information received, which shall include how they believe information and the means used to disseminate that information might be improved. (9) Report to Congress every 2 years on the voluntary participation of critical infrastructure owners and operators in the programs established under this title. (10) Implement a capability to collate, assess, and integrate vulnerability and consequence information with threat streams and hazard information to— (A) evaluate the impact of cybersecurity and cyberphysical impacts of critical physical assets