and background checks, issued by the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security. (H) The vendor agrees to ensure that the election infrastructure will be developed and maintained in a manner that is consistent with data integrity best practices, including requirements for encrypted transfers and validation, testing and checking printed materials for accuracy, and disclosure of quality control incidents, issued by the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security. (I) The vendor agrees to meet the requirements of paragraph (3) with respect to any known or suspected cybersecurity incidents involving any of the goods and services provided by the vendor pursuant to a grant under part 8 of subtitle D of title II of the Help America Vote Act of 2002 (as added by this Act). (J) The vendor agrees to permit independent security testing by the Election Assistance Commission (in accordance with section 231(a) of the Help America Vote Act of 2002 ( 52 U.S.C. 20971 )) and by the Secretary of the goods and services provided by the vendor pursuant to a grant under part 8 of subtitle D of title II of the Help America Vote Act of 2002 (as added by this Act). (3) Cybersecurity incident reporting requirements (A) In general A vendor meets the requirements of this paragraph if, upon becoming aware of the possibility that an election cybersecurity incident has occurred involving any of the goods and services provided by the vendor pursuant to a grant under part 8 of subtitle D of title II of the Help America Vote Act of 2002 (as added by this Act)— (i) the vendor promptly assesses whether or not such an incident occurred, and submits a notification meeting the requirements of subparagraph (B) to the Secretary and the Chair of the assessment as soon as practicable (but in no case later than 3 days after the vendor first becomes aware of the possibility that the incident occurred)