; or (2) any other company that is subject to extrajudicial direction from a foreign government. (b) Completion of pending proceeding (1) In general Not later than 90 days after the date of enactment of this Act, the Commission shall adopt a Report and Order in the proceeding captioned Protecting Against National Security Threats to the Communications Supply Chain Through FCC Programs (WC Docket No. 18–89). (2) Exemptions In implementing paragraph (1), the Commission may exempt types or categories of equipment, services, or components thereof that do not pose an undue risk of sabotage to or subversion of the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of communications networks in the United States. (c) Entities posing a national security risk In determining, for purposes of subparagraph (E) of the definition of the term covered company , which entities are entities posing a national security risk, the Commission shall rely solely upon a determination made— (1) by— (A) an appropriate national security agency; (B) an interagency body that includes appropriate national security expertise, including the Federal Acquisition Security Council established under section 1322 of title 41, United States Code; or (C) Congress; or (2) under Executive Order 13873 (84 Fed. Reg. 22689; relating to securing the information and communications technology and services supply chain) or any implementing regulations. 5. Equipment replacement grants (a) In general The Commission shall make grants to United States communications providers using amounts— (1) made available from the Supply Chain Security Trust Fund; or (2) borrowed under subsection (d) of this section. (b) Equipment To be replaced Amounts from a grant under subsection (a)— (1) may be used only to replace communications equipment and services obtained from a covered company or another entity posing a national security risk, under such terms and conditions as the Commission shall establish