; (2) by redesignating paragraph (4) as paragraph (5); and (3) by inserting after paragraph (3) the following new paragraph: (4) develop, publish and update as necessary guidelines and processes for a national audience regarding best practices for effective and usable basic controls that have the most impact in defending again common cybersecurity threats and cybersecurity risks; and . (b) Restriction Chapter 35 of title 44, United States Code (commonly known as the Paperwork Reduction Act ) shall not apply to any action to implement this Act. 303. Establishment of continuous diagnostics and mitigation program in the Cybersecurity and Infrastructure Security Agency (a) In general Section 2213 of the Homeland Security Act of 2002 ( 6 U.S.C. 663 ) is amended by adding at the end the following new subsection: (g) Continuous diagnostics and mitigation (1) Program (A) In general The Secretary, acting through the Director of Cybersecurity and Infrastructure Security, shall deploy, operate, and maintain a continuous diagnostics and mitigation program for agencies. Under such program, the Secretary shall— (i) assist agencies to continuously diagnose and mitigate cyber threats and vulnerabilities; (ii) develop and provide the capability to collect, analyze, and visualize information relating to security data and cybersecurity risks at agencies; (iii) make program capabilities available for use, with or without reimbursement, to civilian agencies and State, local, Tribal, and territorial governments; (iv) employ shared services, collective purchasing, blanket purchase agreements, and any other economic or procurement models the Secretary determines appropriate to maximize the costs savings associated with implementing an information system