; and (C) by adding at the end the following new clauses: (ii) For purposes of this subparagraph, the term secure information communications technology means a commercial-off-the-shelf computing device which has been configured to restrict unauthorized access and uses publicly-available baseline configurations. (iii) For purposes of this subparagraph, the term cybersecurity product or service means a product or service which helps an organization to achieve the set of standards, guidelines, best practices, methodologies, procedures, and processes to cost-effectively identify, detect, protect, respond to, and recover from cyber risks as developed by the National Institute of Standards and Technology pursuant to subsections (c)(15) and (e) of section 272 of title 15, United States Code. (iv) An authorized committee may not sell any secure information communications technology or cybersecurity products or services received by the authorized committee that were purchased using such account funds. Nothing in the preceding sentence shall prevent an authorized committee from donating such secure information communications technology or cybersecurity products or services to a charitable organization or to a Federal, State, local, or Tribal government agency at the conclusion of the campaign. . (2) Reporting Section 304(b) of such Act ( 52 U.S.C. 30104(b) ) is amended by striking and at the end of paragraph (7), by striking the period at the end of paragraph (8) and inserting