; and (VI) any other criteria the Advisory Committee and Secretary determine is necessary and appropriate; and (iii) to the extent possible, incorporate existing cybersecurity and data security benchmarks, such as the baseline of cybersecurity features defined in the document entitled Core Cybersecurity Feature Baseline for Securable IoT Devices: A Starting Point for IoT Device Manufacturers , published by the National Institute of Standards and Technology in July 2019, or any successor thereto; (2) may not establish any cybersecurity and data security benchmark under paragraph (1) that is arbitrary, capricious, an abuse of discretion, or otherwise not in accordance with law; (3) shall permit a manufacturer or distributor of a covered product to display a Cyber Shield label reflecting the extent to which the covered product meets the cybersecurity and data security benchmarks established under paragraph (1); (4) shall promote technologies, practices, and policies that— (A) are compliant with the cybersecurity and data security benchmarks established under paragraph (1); and (B) the Secretary determines are the preferred technologies, practices, and policies in the marketplace for— (i) enhancing cybersecurity; (ii) ensuring that cybersecurity is incorporated in all aspects of the life cycle of a covered product; and (iii) protecting data; (5) shall work to enhance public awareness of the Cyber Shield label, including through public outreach, education, research and development, and other means; (6) shall preserve the integrity of the Cyber Shield label; (7) if helpful in fulfilling the obligation under paragraph (6), may elect to not treat a covered product as a covered product certified under the Cyber Shield program until the covered product meets appropriate conformity standards, which may include— (A) standards relating to testing by an accredited third-party certifying laboratory or other entity in accordance with the Cyber Shield program