; and (ii) if the Director determines that additional updates are needed under clause (i), make those updates to the framework. (C) Developing framework In developing the framework described in subparagraph (A), the Director shall consult with— (i) appropriate Federal agencies, including the National Institute of Standards and Technology; (ii) individuals and nonprofit organizations from the open source software community; and (iii) private companies from the open source software community. (D) Usability The Director shall ensure, to the greatest extent practicable, that the framework described in subparagraph (A) is usable by the open source software community, including through the consultation described in subparagraph (C). (E) Federal open source software assessment Not later than 1 year after the publication of the framework described in subparagraph (A), and not less frequently than every 2 years thereafter, the Director shall, to the greatest extent practicable and using the framework described in subparagraph (A)— (i) perform an assessment of open source software components used directly or indirectly by Federal agencies based on readily available, and, to the greatest extent practicable, machine readable, information, such as— (I) software bills of material s that are, at the time of the assessment, made available to the Agency or are otherwise accessible via the internet; (II) software inventories, available to the Director at the time of the assessment, from the Continuous Diagnostics and Mitigation program of the Agency; and (III) other publicly available information regarding open source software components