; and (D) upon the request of the Director, provide to the Director recommendations, as appropriate, regarding how to— (i) address cybersecurity risks and cybersecurity threats on information systems of State, local, Tribal, or territorial governments; (ii) and improve the cybersecurity resilience of such governments. (3) Membership (A) Number and appointment The State and Local Cybersecurity Resiliency Committee shall be composed of 15 members appointed by the Director, as follows: (i) Two individuals recommended to the Director by the National Governors Association. (ii) Two individuals recommended to the Director by the National Association of State Chief Information Officers. (iii) One individual recommended to the Director by the National Guard Bureau. (iv) Two individuals recommended to the Director by the National Association of Counties. (v) Two individuals recommended to the Director by the National League of Cities. (vi) One individual recommended to the Director by the United States Conference of Mayors. (vii) One individual recommended to the Director by the Multi-State Information Sharing and Analysis Center. (viii) Four individuals who have educational and professional experience related to cybersecurity analysis or policy. (B) Terms Each member of the State and Local Cybersecurity Resiliency Committee shall be appointed for a term of two years, except that such term shall be three years only in the case of members who are appointed initially to the Committee upon the establishment of the Committee. Any member appointed to fill a vacancy occurring before the expiration of the term for which the member’s predecessor was appointed shall be appointed only for the remainder of such term. A member may serve after the expiration of such member’s term until a successor has taken office. A vacancy in the Commission shall be filled in the manner in which the original appointment was made. (C) Pay Members of the State and Local Cybersecurity Resiliency Committee shall serve without pay. (4) Chairperson