; (III) Congress; or (IV) the Secretary of Commerce under the program established under Executive Order 13873 (84 Fed. Reg. 22689; relating to securing information and communications technology and services supply chain) or by an agency under any successor program. . (b) Implementation Not later than 1 year after the date of enactment of this Act, the Commission shall take all steps necessary to implement the amendments made by subsection (a).