; (2) the National Institute of Standards and Technology; (3) the intelligence community; (4) the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security; (5) the Science and Technology Directorate of the Department of Homeland Security; (6) academic and independent researchers with expertise in privacy, encryption, cybersecurity, and network threats; (7) participants in multistakeholder standards and technical organizations (including the 3rd Generation Partnership Project and the Internet Engineering Task Force); (8) international stakeholders, in coordination with the Department of State as appropriate; (9) providers of mobile service, including small providers (or the representatives of such providers) and rural providers (or the representatives of such providers); (10) manufacturers, operators, and providers of mobile communications equipment or services and mobile phones and other mobile devices; (11) developers of mobile operating systems and communications software and applications; and (12) other experts that the Assistant Secretary considers appropriate. (d) Scope of report The Assistant Secretary shall— (1) limit the report required by subsection (a) to mobile service networks; (2) exclude consideration of 5G protocols and networks in the report required by subsection (a); (3) limit the assessment required by subsection (b)(1) to vulnerabilities that have been shown to be— (A) exploited in non-laboratory settings; or (B) feasibly and practicably exploitable in real-world conditions