; (2) reviewed the supply chain risk from the presumptive awardee against available and relevant threat information provided by the Federal Bureau of Investigation (FBI) and other appropriate agencies; and (3) developed, in consultation with NIST, the FBI, and supply chain risk management experts, a mitigation strategy for any identified risks. (b) During fiscal year 2018— (1) the FBI, in consultation with NIST, shall develop best practices for supply chain risk management