; (6) reduce costs related to the maintenance of, or effectuate the retirement of, legacy systems; (7) ensure the development and maintenance of security protocols regarding the use of information technology solutions and software across the Department; and (8) improve end-user training on the operation of information technology solutions and to enhance end-user cybersecurity practices. (b) Strategy and implementation plan required (1) In general Not later than 180 days after the date of the enactment of this Act, the Chief Information Officer of the Department shall develop, in consultation with relevant bureaus and offices as appropriate, a strategy and a 5-year implementation plan to advance the objectives described in subsection (a). (2) Consultation No later than one year after the date of the enactment of this Act, the Chief Information Officer shall submit the strategy required by this subsection to the appropriate congressional committees and shall consult with the appropriate congressional committees, not less than on an annual basis for 5 years, regarding the progress related to the implementation plan required by this subjection. (c) Improvement plan for the Bureau for Information Resources Management (1) In general Not later than 180 days after the date of the enactment of this Act, the Chief Information Officer shall develop policies and protocols to improve the customer service orientation, quality and timely delivery of information technology solutions, and training and support for bureau and office-level information technology officers. (2) Survey Not later than one year after the date of the enactment of this Act, and annually thereafter for five years, the Chief Information Officer shall undertake a client satisfaction survey of bureau information technology officers to obtain feedback on metrics related to— (A) customer service orientation of the Bureau of Information Resources Management; (B) quality and timelines of capabilities delivered