; and (B) for each subpoena issued under this subsection— (i) the source of the security vulnerability detected, identified, or received by the Director; (ii) the steps taken to identify the entity at risk prior to issuing the subpoena; and (iii) a description of the outcome of the subpoena, including discussion on the resolution or mitigation of the critical infrastructure security vulnerability. (12) Publication of the annual reports The Director shall make a version of the annual report required by paragraph (11) publicly available, which shall, at a minimum, include the findings described in clauses (iii), (iv), and (v) of subparagraph (A). . 305. CISA Director term limitation (a) In general Subsection (b) of section 2202 of the Homeland Security Act of 2002 ( 6 U.S.C. 652 ) is amended by— (1) redesignating paragraph (2) as paragraph (3); and (2) inserting after paragraph (1) the following new paragraph: (2) Term Effective with respect to an individual appointed to be the Director by the President, by and with the advice and consent of the Senate, after the date of the enactment of this paragraph, the term of office of such an individual so appointed shall be five years, and such an individual may not serve more than two terms. The term of office of the individual serving as the Director as of such date of enactment shall be five years beginning on the date on which the Director began serving. . (b) Amendment relating to qualifications for certain CISA Assistant Directors The Homeland Security Act of 2002 is amended— (1) in subparagraph (B) of section 2203(a)(2) ( 6 U.S.C. 653(a)(2) ), by striking President without the advice and consent of the Senate and inserting Secretary