; (7) evaluation of Federal and non-Federal cyber threat intelligence; (8) data on agency compliance with standards issued under section 11331 of title 40; (9) agency system risk assessments required under section 3554(a)(1)(A); (10) relevant reports from inspectors general of agencies and the Government Accountability Office; and (11) any other information the Director of the Cybersecurity and Infrastructure Security Agency determines relevant. ; and (F) by adding at the end the following: (m) Directives (1) Emergency directive updates If the Secretary issues an emergency directive under this section, the Director of the Cybersecurity and Infrastructure Security Agency shall submit to the Director, the National Cyber Director, the Committee on Homeland Security and Governmental Affairs of the Senate, and the Committees on Oversight and Accountability and Homeland Security of the House of Representatives an update on the status of the implementation of the emergency directive at agencies not later than 7 days after the date on which the emergency directive requires an agency to complete a requirement specified by the emergency directive, and every 30 days thereafter until— (A) the date on which every agency has fully implemented the emergency directive; (B) the Secretary determines that an emergency directive no longer requires active reporting from agencies or additional implementation