; (2) the Department of Homeland Security; (3) the Department of Commerce; (4) the Department of Defense; (5) the Department of Transportation; (6) the Federal Communications Commission; (7) the National Aeronautics and Space Administration; (8) the National Executive Committee for Space-Based Positioning, Navigation, and Timing; and (9) the National Space Council. (d) Briefing Not later than 2 years after the date of enactment of this Act, the Comptroller General of the United States shall provide a briefing to the appropriate congressional committees on the study conducted under subsection (a). (e) Classification The report made under subsection (b) shall be unclassified but may include a classified annex. 4. Responsibilities of the cybersecurity and infrastructure security agency (a) Small business concern defined In this section, the term small business concern has the meaning given the term in section 3 of the Small Business Act ( 15 U.S.C. 632 ). (b) Establishment of commercial satellite system cybersecurity clearinghouse (1) In general Not later than 180 days after the date of enactment of this Act, the Director shall develop and maintain a commercial satellite system cybersecurity clearinghouse. (2) Requirements The clearinghouse— (A) shall be publicly available online; (B) shall contain publicly available commercial satellite system cybersecurity resources, including the voluntary recommendations consolidated under subsection (c)(1); (C) shall contain appropriate materials for reference by entities that develop, operate, or maintain commercial satellite systems; (D) shall contain materials specifically aimed at assisting small business concerns with the secure development, operation, and maintenance of commercial satellite systems