; and (2) the effect of possible efforts to mitigate the threat. (b) Contents The report required by subsection (a) shall include: (1) The timeline and scale of global and regional adoption of foreign fifth-generation wireless network technology. (2) The implications of such global and regional adoption on the cyber and espionage threat to the United States and United States interests as well as to United States cyber and collection capabilities. (3) The effect of possible mitigation efforts, including: (A) United States Government policy promoting the use of strong, end-to-end encryption for data transmitted over fifth-generation wireless networks. (B) United States Government policy promoting or funding free, open-source implementation of fifth-generation wireless network technology. (C) United States Government subsidies or incentives that could be used to promote the adoption of secure fifth-generation wireless network technology developed by companies of the United States or companies of allies of the United States. (D) United States Government strategy to reduce foreign influence and political pressure in international standard-setting bodies. (c) Form The report submitted under subsection (a) shall be submitted in unclassified form to the greatest extent practicable, but may include a classified appendix if necessary. 407. Annual report by Comptroller General of the United States on cybersecurity and surveillance threats to Congress (a) Annual report required Not later than 180 days after the date of the enactment of this Act and not less frequently than once each year thereafter, the Comptroller General of the United States shall submit to the congressional intelligence committees a report on cybersecurity and surveillance threats to Congress. (b) Statistics Each report submitted under subsection (a) shall include statistics on cyber attacks and other incidents of espionage or surveillance targeted against Senators or the immediate families or staff of the Senators, in which the nonpublic communications