; (2) the facility is in full and complete compliance with such other Federal regulatory program, as shown through timely scheduled inspections, audits, and other supporting evidence; and (3) the facility has not, during the five-year period preceding the date on which a waiver is requested, been subject to an enforcement action brought by the Federal regulator overseeing such regulatory program or been found to be noncompliant with any aspect of such regulatory program. (b) Report to congress Not later than two years after the date of the enactment of this Act, the Secretary of Homeland Security shall submit to the appropriate congressional committees a report that includes detailed findings regarding the establishment of the process described in subsection (a) and, if appropriate, recommendations for implementation. (c) Appropriate congressional committees In this section, the term appropriate congressional committees means— (1) the Committee on Homeland Security and Governmental Affairs of the Senate; and (2) the Committee on Homeland Security and the Committee on Energy and Commerce of the House of Representatives. 11. Review of potential effects of attacks on covered chemical facilities on other critical infrastructure (a) Review required The Director of the Cybersecurity and Infrastructure Security Agency shall— (1) conduct a review of the risk assessment approach and corresponding tiering methodology for covered chemical facilities required pursuant to section 2102(e)(2) of the Homeland Security Act of 2002, as amended by this Act, and assess the extent to which the approach and tiering methodology takes into account— (A) the nature of the area surrounding the chemical facility, the presence of nearby facilities or other critical infrastructure, and other features of the community that could contribute to the consequences of a terrorist attack or exploitation of chemicals of interest