; (B) the Secretary determines that an emergency directive no longer requires active reporting from agencies or additional implementation; or (C) the date that is 1 year after the issuance of the directive. (2) Binding operational directive updates If the Secretary issues a binding operational directive under this section, the Director of the Cybersecurity and Infrastructure Security Agency shall submit to the Director, the National Cyber Director, the Committee on Homeland Security and Governmental Affairs of the Senate, and the Committees on Oversight and Accountability and Homeland Security of the House of Representatives an update on the status of the implementation of the binding operational directive at agencies not later than 30 days after the issuance of the binding operational directive, and every 90 days thereafter until— (A) the date on which every agency has fully implemented the binding operational directive; (B) the Secretary determines that a binding operational directive no longer requires active reporting from agencies or additional implementation; or (C) the date that is 1 year after the issuance or substantive update of the directive. (3) Report If the Director of the Cybersecurity and Infrastructure Security Agency ceases submitting updates required under paragraphs (1) or (2) on the date described in paragraph (1)(C) or (2)(C), the Director of the Cybersecurity and Infrastructure Security Agency shall submit to the Director, the National Cyber Director, the Committee on Homeland Security and Governmental Affairs of the Senate, and the Committees on Oversight and Accountability and Homeland Security of the House of Representatives a list of every agency that, at the time of the report— (A) has not completed a requirement specified by an emergency directive