Independent security testing and coordinated cybersecurity vulnerability disclosure pilot program for election systems (a) In general (1) Establishment The Commission, in consultation with the Secretary, shall establish an Independent Security Testing and Coordinated Vulnerability Disclosure Pilot Program for Election Systems (VDP–E) (in this section referred to as the program ) in order to test for and disclose cybersecurity vulnerabilities in election systems. (2) Duration The program shall be conducted for a period of 5 years. (3) Requirements In carrying out the program, the Commission, in consultation with the Secretary, shall— (A) establish a mechanism by which an election systems vendor may make their election system (including voting machines and source code) available to cybersecurity researchers participating in the program