on the appropriate use and management by agencies of unmanned aircraft systems owned or controlled by an agency and regularly connected to or exchanging data with information systems owned or controlled by an agency, including minimum information security requirements for managing cybersecurity risks associated with such devices. (2) Publication Not later than 1 year after the date of the enactment of this Act, the Under Secretary shall publish the guidelines developed pursuant to paragraph (1) in a manner that is consistent with section 20 of the National Institute of Standards and Technology Act ( 15 U.S.C. 278g–3 ). (3) Consistency with ongoing efforts The Under Secretary shall ensure that the standards and guidelines developed under paragraph (1) are consistent with the efforts of the National Institute of Standards and Technology in effect on the date of the enactment of this Act— (A) regarding— (i) examples of possible security vulnerabilities of unmanned aircraft systems