to which such information was acted upon by industry and other stakeholders. (5) A description of how privacy and civil liberties are preserved in the collection, retention, use, and sharing of vulnerability disclosures. (b) Form The report required under subsection (b) shall be submitted in unclassified form but may contain a classified annex. 4. Competition relating to cybersecurity vulnerabilities The Under Secretary for Science and Technology of the Department of Homeland Security, in consultation with the Director of the Cybersecurity and Infrastructure Security Agency of the Department, may establish an incentive-based program that allows industry, individuals, academia, and others to compete in identifying remediation solutions for cybersecurity vulnerabilities (as such term is defined in section 2209 of the Homeland Security Act of 2002, as amended by section 2) to information systems (as such term is defined in such section 2209) and industrial control systems, including supervisory control and data acquisition systems.