; (4) identifying incidents quickly; (5) isolating and removing unauthorized entities from agency systems as quickly as practicable, accounting for intelligence or law enforcement purposes; and (6) otherwise increasing the resource costs for entities that cause incidents to be successful. (b) Progress report As a part of each report required to be submitted under section 3553(c) of title 44, United States Code, during the period beginning on the date that is 4 years after the date of enactment of this Act and ending on the date that is 10 years after the date of enactment of this Act, the Director shall include an update on agency implementation of zero trust architecture, which shall include— (1) a description of steps agencies have completed, including progress toward achieving any requirements issued by the Director, including the adoption of any models or reference architecture; (2) an identification of activities that have not yet been completed and that would have the most immediate security impact