; (2) conduct analyses regarding trends in cyber incidents against such entity; (3) develop systematic approaches to assist such entity in preventing and responding to cyber incidents; (4) increase the awareness and preparedness of a covered entity regarding the cybersecurity of such covered entity; and (5) identify, prevent, or investigate cyber incidents targeting a covered entity. (c) Information collection The Director of the Cybersecurity and Infrastructure Security Agency may collect information relating to cyber incidents to store in the registry established pursuant to subsection (a). Such information may be submitted by a covered entity and may include the following: (1) The dates of each cyber incident, including the dates on which each such incident was initially detected and the dates on which each such incident was first publicly reported or disclosed to another entity. (2) A description of each cyber incident, which shall include whether each such incident was as a result of a breach, malware, distributed denial of service attack, or other method designed to cause a vulnerability. (3) The effects of each cyber incident, including descriptions of the type and size of each such incident. (4) Other information determined relevant by the Director. (d) Report The Director of the Cybersecurity and Infrastructure Security Agency shall make available on the School Cybersecurity Information Exchange established under section 2 an annual report relating to cyber incidents affecting elementary schools and secondary schools which includes data, and the analysis of such data, in a manner that— (1) is— (A) de-identified; and (B) presented in the aggregate