; and (iv) provide for reasonable notice and opportunity for public comment, due process, openness, and balance of interests in developing cybersecurity risk and resilience requirements and otherwise exercising duties. (d) Cybersecurity risk and resilience requirements (1) In general (A) Proposed requirements The WRRO shall propose and file with the Administrator each cybersecurity risk and resilience requirement or modification to a requirement that it proposes to be made effective under this section. (B) Implementation plan For each cybersecurity risk and resilience requirement or modification to such a requirement proposed pursuant to subparagraph (A), the WRRO shall also propose an implementation plan, including the schedule by which covered water systems must achieve compliance with all or parts of the cybersecurity risk and resilience requirement or modification to such a requirement. The enforcement date must provide a reasonable implementation period for covered water systems to meet the requirements under the implementation plan. (2) Approval (A) In general Notwithstanding paragraph (3)(A), the Administrator shall approve, by rule or order, a proposed cybersecurity risk and resilience requirement or modification to such a requirement if the Administrator determines that the requirement is just, reasonable, not unduly Discriminatory, or preferential. (B) Deference to WRRO The Administrator shall defer to the technical expertise of the WRRO with respect to the content of a proposed cybersecurity risk and resilience requirement or modification to such a requirement. (3) Disapproval of requirement (A) In general Notwithstanding paragraph (2)(A), the Administrator shall remand to the WRRO a proposed cybersecurity risk and resilience requirement or modification to such a requirement for which the Administrator disapproves, in whole or in part, and provide 1 or more specific recommendations that would cause the proposed requirement or modification to be approved under paragraph (2). (B) Response and approval