under paragraph (1) shall be subject to appropriate security controls to ensure that any sensitive information conveyed by such transfer or export is protected from disclosure to persons unauthorized by the United States to receive such information. (B) Certification Not later than 30 days before the first transfer or export of a defense service under paragraph (1), and annually thereafter, the President shall certify to the Committee on Foreign Relations of the Senate and the Committee on Foreign Affairs of the House of Representatives that the controls described in subparagraph (A) will protect the information described in such subparagraph for the defense services so transferred or exported. (i) Report (1) In general Not later than 180 days after the date of the enactment of this Act and annually thereafter for 15 years, the President shall submit to the appropriate congressional committees and leadership a report describing— (A) the status of the transfer of vessels authorized under subsection (a)