; and (B) the process for identifying, establishing, reporting on, adopting, maintaining, and promoting compliance with the voluntary cybersecurity and data security benchmarks required to be established under section 4. (2) Public availability of recommendations The Advisory Committee shall publish, and provide the public with an opportunity to comment on, the recommendations provided to the Secretary under paragraph (1). (c) Members, chair, and duties (1) Appointment (A) In general The Advisory Committee shall be composed of members appointed by the Secretary from among individuals who are specially qualified to serve on the Advisory Committee based on the education, training, or experience of those individuals. (B) Representation Members appointed under subparagraph (A) shall include— (i) representatives of the covered products industry, including small, medium, and large businesses; (ii) cybersecurity experts, including independent cybersecurity researchers that specialize in areas such as cryptanalysis, hardware and software security, wireless and network security, cloud security, and data privacy; (iii) public interest advocates; (iv) a liaison from the Information Security and Privacy Advisory Board established under section 21(a) of the National Institute of Standards and Technology Act ( 15 U.S.C. 278g–4(a) ) who is a member of that Board as described in paragraph (3) of such section 21(a); (v) Federal employees with expertise in certification, covered devices, or cybersecurity, including employees of— (I) the Department of Commerce; (II) the National Institute of Standards and Technology; (III) the Federal Trade Commission; (IV) the Federal Communications Commission; and (V) the Consumer Product Safety Commission