; and (B) whose personal technology devices or personal accounts are highly vulnerable to cyber attacks and hostile information collection activities. (c) Nature of cyber protection support Subject to the availability of resources, the cyber protection support provided to personnel under subsection (a) may include training, advice, assistance, and other services relating to cyber attacks and hostile information collection activities. (d) Limitation on support Nothing in this section shall be construed— (1) to encourage personnel of the intelligence community to use personal technology devices for official business; or (2) to authorize cyber protection support for senior intelligence community personnel using personal devices, networks, and personal accounts in an official capacity. (e) Report Not later than 180 days after the date of the enactment of this Act, the Director shall submit to the congressional intelligence committees a report on the provision of cyber protection support under subsection (a). The report shall include— (1) a description of the methodology used to make the determination under subsection (a)(2); and (2) guidance for the use of cyber protection support and tracking of support requests for personnel receiving cyber protection support under subsection (a). 309. Modification of authority relating to management of supply-chain risk (a) Modification of effective date Subsection (f) of section 309 of the Intelligence Authorization Act for Fiscal Year 2012 ( Public Law 112–87 ; 50 U.S.C. 3329 note) is amended by striking the date that is 180 days after . (b) Extension Subsection (g) of such section is amended by striking the date and all that follows through the period and inserting September 30, 2023. . (c) Reports Such section is amended— (1) by redesignating subsections (f) and (g), as amended by subsections (a) and (b), as subsections (g) and (h), respectively