; and (B) the Committee on Homeland Security and the Committee on Energy and Commerce of the House of Representatives. 12. Comptroller General reports (a) Evaluation of effectiveness of risk-Based performance standards (1) Study and report Not later than 18 months after the date of the enactment of this Act, the Comptroller General of the United States shall conduct a study and submit to the appropriate congressional committees a report on the effectiveness of the risk-based performance standards used by the Department of Homeland Security under title XXI of the Homeland Security Act of 2002 ( 6 U.S.C. 621 et seq.) in protecting businesses, employees, the economy, the public, and national security against existing and evolving threats of concern. (2) Contents of report The report required by paragraph (1) shall address— (A) the sufficiency of security risk determinations and countermeasures under title XXI of the Homeland Security Act of 2002 ( 6 U.S.C. 621 et seq.); and (B) the need for revised or additional methods to address evolving security risks. (b) Evaluation of information management Not later than one year after the date of the enactment of this Act, the Comptroller General of the United States shall conduct a study and submit to the appropriate congressional committees a report on— (1) how the Secretary of Homeland Security documents, maintains, and uses information on tiering changes pursuant to section 2102(e)(3) of the Homeland Security Act of 2002 ( 6 U.S.C. 622(e)(3) )