; and (5) copies of Agency guidance provided to employees of and other individuals affiliated with the Agency with respect to reporting and responding to a suspected anomalous health incident, and the roles and responsibilities of each element of the Agency tasked with responding to a report of an anomalous health incident. (e) Briefing Not later than 90 days after the date of the enactment of this Act, the Director of the Central Intelligence Agency shall brief the congressional intelligence committees, the Subcommittee on Defense of the Committee on Appropriations of the Senate, and the Subcommittee on Defense of the Committee on Appropriations of the House of Representatives on the report. X Election security 1001. Strengthening Election Cybersecurity to Uphold Respect for Elections through Independent Testing Act of 2023 (a) Requiring penetration testing as part of the testing and certification of voting systems Section 231 of the Help America Vote Act of 2002 ( 52 U.S.C. 20971 ) is amended by adding at the end the following new subsection: (e) Required penetration testing (1) In general Not later than 180 days after the date of the enactment of this subsection, the Commission shall provide for the conduct of penetration testing as part of the testing, certification, decertification, and recertification of voting system hardware and software by accredited laboratories under this section. (2) Accreditation The Director of the National Institute of Standards and Technology shall recommend to the Commission entities the Director proposes be accredited to carry out penetration testing under this subsection and certify compliance with the penetration testing-related guidelines required by this subsection. The Commission shall vote on the accreditation of any entity recommended. The requirements for such accreditation shall be a subset of the requirements for accreditation of laboratories under subsection (b) and shall only be based on consideration of an entity's competence to conduct penetration testing under