; and (II) the disposal of the equipment or services removed as described in subclause (I) in accordance with the requirements under paragraph (8); and (ii) has developed a specific timeline (subject to paragraph (7)) for the permanent removal, replacement, and disposal of the covered communications equipment or services identified under clause (i), which timeline shall be submitted to the Commission as part of the application; and (B) beginning on the date of the approval of the application, the applicant— (i) will not purchase, rent, lease, or otherwise obtain covered communications equipment or services, using reimbursement funds or any other funds (including funds derived from private sources); and (ii) in developing and tailoring the risk management practices of the applicant, will consult and consider the standards, guidelines, and best practices set forth in the cybersecurity framework developed by the National Institute of Standards and Technology. (6) Distribution of reimbursement funds (A) In general The Commission shall make reasonable efforts to ensure that reimbursement funds are distributed equitably among all applicants for reimbursements under the Program according to the needs of the applicants, as identified by the applications of the applicants. (B) Notification If, at any time during the implementation of the Program, the Commission determines that the funds made available to the Commission to carry out the Program will not be sufficient to fully fund all approved applications for reimbursements under the Program, the Commission shall immediately notify— (i) the Committee on Energy and Commerce and the Committee on Appropriations of the House of Representatives