accessed, compromised, or potentially compromised by each incident, including any such information contained on information systems owned, operated, managed, or utilized by any other Federal department or agency. (5) An assessment of whether such information system was compromised by such incident, including an assessment of the following: (A) The known or suspected perpetrators, including state actors. (B) The methods used to carry out the incident. (C) The known or suspected intent of the actors in accessing the information system. (6) A description of the actions the Department has taken or plans to take, including timelines and descriptions of any progress on plans described in prior reports, to prevent future, similar incidents affecting such information systems. 503. Prohibition on contracting with certain telecommunications providers (a) List of covered contractors Not later than 30 days after the date of the enactment of this Act, the Secretary, in consultation with the Director of National Intelligence, shall develop or maintain, as the case may be, and update as frequently as the Secretary determines appropriate, a list of covered contractors with respect to which the prohibition specified in subsection (b) shall apply. (b) Prohibition on contracts The Secretary may not enter into a contract with a covered contractor on the list described in subsection (a). (c) Removal from list To be removed from the list described in subsection (a), a covered contractor may submit a request to the Secretary in such manner as the Secretary determines appropriate. The Secretary, in consultation with the Director of National Intelligence, shall determine a process for removing covered contractors from the list, as appropriate, and publicly disclose such process. (d) Waivers (1) In general The President or the Secretary may waive the prohibition specified in subsection (b) if the President or the Secretary determines that such waiver is justified for national security reasons. (2) Waiver for overseas operations The