; (2) in section 3553— (A) in subsection (a)— (i) in paragraph (5), by striking and at the end; (ii) in paragraph (6), by striking the period at the end and inserting ; and ; and (iii) by adding at the end the following: (7) promoting, in consultation with the Director of the Cybersecurity and Infrastructure Security Agency, the National Cyber Director, and the Director of the National Institute of Standards and Technology— (A) the use of automation to improve Federal cybersecurity and visibility with respect to the implementation of Federal cybersecurity; and (B) the use of presumption of compromise and least privilege principles, such as zero trust architecture, to improve resiliency and timely response actions to incidents on Federal systems. ; (B) in subsection (b)— (i) in the matter preceding paragraph (1), by inserting and the National Cyber Director after Director ; (ii) in paragraph (2)(A), by inserting and reporting requirements under subchapter IV of this chapter after section 3556 ; (iii) by redesignating paragraphs (8) and (9) as paragraphs (10) and (11), respectively; and (iv) by inserting after paragraph (7) the following: (8) expeditiously seeking opportunities to reduce costs, administrative burdens, and other barriers to information technology security and modernization for agencies, including through shared services for cybersecurity capabilities identified as appropriate by the Director, in coordination with the Director of the Cybersecurity and Infrastructure Security Agency and other agencies as appropriate; ; (C) in subsection (c)— (i) in the matter preceding paragraph (1)— (I) by striking each year and inserting each year during which agencies are required to submit reports under section 3554(c) ; (II) by inserting , which shall be unclassified but may include 1 or more annexes that contain classified or other sensitive information, as appropriate after a report ; and (III) by striking preceding year and inserting preceding 2 years ; (ii) by striking paragraph (1)