; (B) may incorporate the program into an applicable comprehensive safety plan that the recipient prepares under subsection (d), if the plan addresses each requirement under this subsection; and (C) shall develop the program in cooperation with rail workers and collective bargaining representatives of rail workers, including the development of— (i) the risk analysis required under subparagraph (A); and (ii) the implementation plan required under paragraph (3). (3) Implementation plan Each risk reduction program for assaults on rail workers under paragraph (1) shall include an implementation plan for rail worker assault mitigation. (4) Updating requirements The Secretary shall require each recipient required to develop a program under paragraph (1) to— (A) update the program annually; and (B) resubmit the program for approval by the Secretary not less than once every 3 years. . 5. Authorization of appropriations (a) Amount and duration There are authorized to be appropriated to carry out implementation plans under the bus operations safety risk reduction program described in subsection (l) of section 5329 of title 49, United States Code (as added by section 3 of this Act), $25,000,000 for each of fiscal years 2019 through 2023. (b) Formula Of the amounts made available to carry out subsection (l) of section 5329 of title 49, United States Code, for a fiscal year— (1) 80 percent shall be distributed under the formula set forth in section 5336 of title 49, United States Code, other than subsection (b) of that section