the security of critical technologies. (2) Limitation The authority provided under paragraph (1) may be exercised except if such exercise would result in the operation at any time of fewer than two Centers. (d) Selection of critical technologies (1) In general Before awarding a grant, contract, or cooperative agreement to a covered entity to establish a Center, the Under Secretary for Science and Technology shall coordinate with the Director, who shall provide the Under Secretary a list of critical technologies or guidance on such technologies that would be within the remit of any such Center. (2) Expansion and modification The Under Secretary for Science and Technology, in coordination with the Director, is authorized to expand or modify at any time the list of critical technologies or guidance on technologies referred to in paragraph (1) that is within the remit of a proposed or established Center. (e) Responsibilities In carrying out the evaluation and testing of the security of critical technology pursuant to subsection (a), the Centers shall each have the following responsibilities: (1) Conducting rigorous security testing to identify vulnerabilities in such technologies. (2) Utilizing the coordinated vulnerability disclosure processes established under subsection (g) to report to the developers of such technologies and, as appropriate, to the Director, information relating to vulnerabilities discovered and any information necessary to reproduce such vulnerabilities. (3) Developing new capabilities for improving the security of such technologies, including vulnerability discovery, management, mitigation, and remediation. (4) Assessing the security of software, firmware, and hardware that underpin national critical functions. (5) Supporting existing communities of interest, including through grant making, in mitigating and remediating vulnerabilities discovered within such technologies. (6) Sharing findings to inform and support the future work of the Cybersecurity and Infrastructure Security Agency. (f)