; and (v) the number of entities notified by the Director under this subsection, and their response, during the previous year; and (B) for each subpoena issued under this subsection— (i) the source of the security vulnerability detected, identified, or received by the Director; (ii) the steps taken to identify the entity at risk prior to issuing the subpoena; and (iii) a description of the outcome of the subpoena, including discussion on the resolution or mitigation of the critical infrastructure security vulnerability. (11) Publication of the annual reports The Director shall make a version of the annual report required by paragraph (10) publicly available, which shall, at a minimum, include the findings described in clause (iii), (iv) and (v) of subparagraph (A). .