; (2) consideration of the definition of national security system ; and (3) recommendations to improve the cybersecurity posture of national security assets, including such assets controlled or accessed by covered entities. (c) Definitions In this section: (1) Appropriate congressional committees The term appropriate congressional committees means— (A) the Select Committee on Intelligence and the Committee on Homeland Security and Governmental Affairs of the Senate; and (B) the Permanent Select Committee on Intelligence and the Committee on Homeland Security of the House of Representatives. (2) Covered entities The term covered entities means— (A) owners and operators of critical infrastructure; and (B) academic institutions in the United States, corporations incorporated in the United States, and corporations operating inside the United States. 607. Feasibility study on cybersecurity policies of contractors of owner or operators of national security systems (a) Study Not later than one year after the date of the enactment of this Act, the Director of the National Security Agency shall conduct a feasibility study with respect to requiring contractors (including subcontractors) of departments or agencies of the Federal Government that own or operate national security systems to implement mandatory cybersecurity policies or defensive measures. The study shall include— (1) the estimated cost to the Federal Government of deploying such mandatory cybersecurity policies or defensive measures; (2) whether there are sufficient legal and policy authorities in place to implement such mandatory cybersecurity policies or defensive measures; (3) a description of enforcement mechanisms for such mandatory cybersecurity policies or defensive measures