; (3) providing training to employees and offices of the institution that have responsibilities relating to research security; and (4) providing advice and assistance to institutions in establishing and maintaining research security programs. (c) Considerations In selecting an entity to receive a contract or other agreement under subsection (a), the Secretary of Defense shall consider the following: (1) Geographic diversity and the extent to which the entity is able to maximize coverage of different regions of the United States. (2) Any ratings of the entity made by the Defense Counterintelligence and Security Agency as part of the Agency’s annual security vulnerability assessment ratings. (3) Whether and to what extent the entity uses best practices for research security as outlined by the National Institute of Standards and Technology. (4) The entity’s demonstrated excellence in security programs, including receipt of awards for excellence in counterintelligence and outstanding achievement in industrial security. (d) Performance metrics The Secretary of Defense shall establish metrics to measure the performance of each entity with which the Secretary enters into a contract or other agreement under subsection (a). (e) Notification and report For any year in which the Secretary of Defense exercises the authority provided under subsection (a), the Secretary shall submit to the congressional defense committees a report that— (1) identifies each eligible entity with which the Secretary entered into a contract or other agreement under such subsection; and (2) evaluates the performance of the entity. (f) Eligible entity defined In this section, the term eligible entity means— (1) an entity the Secretary of Defense determines to be eligible to participate in the activities authorized under this section