; (F) develop a process by which an approved individual, organization, or company can— (i) register with entities referred to in subparagraph (B); (ii) submit to a background check, as determined by the Department; and (iii) receive a determination as to eligibility for participation in the pilot program; (G) engage qualified interested persons, including nongovernmental sector representatives, about the structure of the pilot program, as constructive and to the extent practicable; and (H) consult with relevant United States Government officials to ensure that the pilot program complements persistent network and vulnerability scans of the Department’s Internet-accessible systems, such as the scans conducted pursuant to Binding Operational Directive 15–01, issued by the Secretary of Homeland Security on May 21, 2015. (3) Duration The pilot program established under paragraph (1) should be terminated not later than 1 year after the date on which it is established. (b) Report Not later than 180 days after the completion of the Bug Bounty Pilot Program under subsection (a), the Secretary shall submit a report to the Committee on Foreign Relations of the Senate and the Committee on Foreign Affairs of the House of Representatives that describes the pilot program, including information regarding— (1) the number of approved individuals, organizations, or companies involved in the pilot program, broken down by— (A) the number of approved individuals, organizations, or companies that registered for the pilot program; (B) the number of such entities that were approved to participate in the pilot program; (C) the number of such entities that submitted security vulnerabilities under the pilot program; and (D) the number of such entities that received compensation under the pilot program; (2) the number and severity, in accordance with the National Vulnerabilities Database of the National Institute of Standards and Technology, of security vulnerabilities reported under the pilot program