; (vii) assess and mitigate, to the greatest degree possible, cybersecurity risks and cybersecurity threats related to critical infrastructure and key resources, the degradation of which may impact the performance of information systems within such State; (viii) enhance capability to share cyber threat indicators and related information between such State and local, Tribal, and territorial governments that own or operate information systems within such State; and (ix) develop and coordinate strategies to address cybersecurity risks and cybersecurity threats in consultation with— (I) local, Tribal, and territorial governments within the State; and (II) as applicable— (aa) neighboring States or, as appropriate, members of an information sharing and analysis organization; and (bb) neighboring countries; and (C) include, to the extent practicable, an inventory of the information technology deployed on the information systems owned or operated by such State or by local, Tribal, or territorial governments within such State, including legacy information technology that is no longer supported by the manufacturer. (2) Discretionary elements The Cybersecurity Plan of a State described in paragraph (1) may include— (A) cooperative programs developed by groups of local, Tribal, and territorial governments within such State to address cybersecurity risks and cybersecurity threats