; (4) include case studies of practical application; (5) are technology-neutral and can be implemented using technologies that are commercial and off-the-shelf; and (6) to the extent practicable, are based on international standards. (c) National cybersecurity awareness and education program The Director shall ensure that the resources disseminated under subsection (a) are consistent with the efforts of the Director under section 401 of the Cybersecurity Enhancement Act of 2014 ( 15 U.S.C. 7451 ). (d) Updates The Director shall review periodically and update the resources under subsection (a) as the Director determines appropriate. (e) Voluntary resources The use of the resources disseminated under paragraph (1) shall be considered voluntary. (f) Other Federal Cybersecurity Requirements Nothing in this section may be construed to supersede, alter, or otherwise affect any cybersecurity requirements applicable to Federal agencies. (g) Funding This Act shall be carried out using funds made available to the Director.