; (B) Federal and private sector cyberspace infrastructure of the United States; (C) intellectual property in the United States; and (D) the privacy of citizens of the United States. (5) A review of policy tools available to the President to deter and de-escalate tensions with foreign countries, state-sponsored actors, and private actors regarding threats in cyberspace, the degree to which such tools have been used, and whether such tools have been effective deterrents. (6) A review of resources required to conduct activities to build responsible norms of international cyber behavior. (7) A plan of action, developed in consultation with relevant Federal departments and agencies as the President may direct, to guide the diplomacy of the Department of State with regard to inclusion of cyber issues in mutual defense agreements. (c) Form of strategy (1) Public availability The strategy required under subsection (a) shall be available to the public in unclassified form, including through publication in the Federal Register. (2) Classified annex The strategy required under subsection (a) may include a classified annex, consistent with United States national security interests, if the Secretary of State determines that such annex is appropriate. (d) Briefing Not later than 30 days after the completion of the strategy required under subsection (a), the Secretary of State shall brief the appropriate congressional committees on the strategy, including any material contained in a classified annex. (e) Updates The strategy required under subsection (a) shall be updated— (1) not later than 90 days after any material change to United States policy described in such strategy