(but in no case later than 96 hours after receiving the information) review the information and make a determination whether each of the following apply: (A) There is credible evidence that the incident occurred. (B) There is a basis to believe that the incident resulted, could have resulted, or could result in voter information systems or voter tabulation systems being altered or otherwise affected. (2) Duty to notify State and local officials (A) Duty described If the Secretary makes a determination under paragraph (1) that subparagraphs (A) and (B) of such paragraph apply with respect to an election cybersecurity incident, not later than 96 hours after making the determination, the Secretary shall provide a notification of the incident to each of the following: (i) The chief executive of the State involved. (ii) The State election official of the State involved. (iii) The local election official of the election agency involved. (B) Treatment of classified information (i) Efforts to avoid inclusion of classified information In preparing a notification provided under this paragraph to an individual described in clause (i), (ii), or (iii) of subparagraph (A), the Secretary shall attempt to avoid the inclusion of classified information. (ii) Providing guidance to State and local officials To the extent that a notification provided under this paragraph to an individual described in clause (i), (ii), or (iii) of subparagraph (A) includes classified information, the Secretary (in consultation with the Attorney General and the Director of National Intelligence) shall indicate in the notification which information is classified. (3) Exception (A) In general If the Secretary, in consultation with the Attorney General and the Director of National Intelligence, makes a determination that it is not possible to provide a notification under paragraph (1) with respect to an election cybersecurity incident without compromising intelligence methods or sources or interfering with an ongoing investigation, the Secretary shall