; (3) evaluate and make recommendations for the long-term planning and development of research infrastructure projects; and (4) make recommendations for the management of the Foundation’s business practices, including personnel and financial management. (c) Report to congress Upon completion of the study under subsection (b), the Director shall transmit the study to Congress along with a summary of the Director’s plans, if any, to implement the recommendations of the National Academy. 503. Ethics and security plans (a) Development of ethics and security policies Not later than 6 months after the date of enactment of this Act, the Director shall develop and implement a policy requiring that all proposals for research funding from the Foundation include, if applicable, a plan for managing the risk of any potential ethical or security implications resulting from such research. (b) Requirements The policy shall— (1) include clear guidance of what constitutes ethical and security risks; (2) include field specific guidance as appropriate, which may include biology, artificial intelligence, or cybersecurity; (3) include mechanisms to ensure appropriate evaluation of the submitted ethical and security plans required under this section; (4) include mechanisms to ensure that researchers comply with approved ethical and security plans