; (B) to respond to a cyber incident; (C) to fully mitigate the risk of high-impact cyber vulnerabilities; (D) to recover data following a malicious cyber intrusion; and (E) to collect such other metrics as the Secretary determines would help improve cyber incident reporting practices. 1716. Management by Department of Defense of mobile applications (a) Implementation of recommendations (1) In general The Secretary of Defense shall evaluate and implement to the maximum practicable extent the recommendations of the Inspector General of the Department of Defense with respect to managing mobile applications contained in the report set forth by the Inspector General dated February 9, 2023, and entitled Management Advisory: The DoD's Use of Mobile Applications (Report No. DODIG–2023–041). (2) Deadline The Secretary shall implement the recommendations specified in subsection (a) by not later than one year after the date of the enactment of this Act, unless the Secretary notifies the congressional defense committees in writing of specific recommendations that the Secretary chooses not to implement or to implement after the date that is one year after the date of the enactment of this Act. (b) Briefing on requirements related to covered applications (1) In general Not later than 120 days after the date of the enactment of this Act, the Secretary shall brief the congressional defense committees on actions taken by the Secretary to enforce compliance with existing policy of the Department of Defense that prohibits— (A) the installation and use of covered applications on Federal Government devices