; and (B) reports produced pursuant to such Presidential memorandum (including the reports entitled Protecting the Integrity of Government Science , dated January 2022, and A Framework for Federal Scientific Integrity Policy and Practice , dated January 2023, published by the National Science and Technology Council, or successor documents). (d) System security and user access controls The head of the Program Management Office, acting through the Director of the Operating Entity and in consultation with the NAIRR Steering Subcommittee, the Director of the Office of Management and Budget, the Director of the National Institute of Standards and Technology, and the Director of the Cybersecurity and Infrastructure Security Agency— (1) shall establish minimum security requirements for all persons interacting with the NAIRR, consistent with the most recent version of the Cybersecurity Framework, or successor document, maintained by the National Institute of Standards and Technology; and (2) may establish tiers of security requirements and user access controls beyond the minimum requirements relative to security risks. (e) Fee schedule The head of the Program Management Office, acting through the Director of the Operating Entity, may establish a fee schedule for access to the NAIRR. The Operating Entity may only charge fees in such fee schedule. Such fee schedule— (1) may differ by type of eligible user and type of affiliated entity described in subsection (a); (2) shall include a free tier of access based on appropriated funds and anticipated costs and demand; (3) may include cost-based charges for eligible users to purchase resources of the NAIRR beyond the resources included in a free or subsidized tier