; and (ii) if the Director so determines that such additional updates are needed, make such updates. (C) Developing framework In developing the framework described in subparagraph (A), the Director shall consult with the following: (i) Appropriate Federal agencies, including the National Institute of Standards and Technology. (ii) The open source software community. (D) Usability The Director shall ensure, to the greatest extent practicable, that the framework described in subparagraph (A) is usable by the open source software community, including through the consultation required under subparagraph (C). (E) Federal open source software assessment Not later than one year after the publication of the framework under subparagraph (A) and not less frequently than every two years thereafter, the Director shall, to the greatest extent practicable and using such framework— (i) perform an assessment of each open source software component deployed on high value assets, as described in Office of Management and Budget memorandum M-19-03 (issued December 10, 2018) or successor guidance, at Federal agencies based on readily available, and, to the greatest extent practicable, machine readable, information, such as— (I) software bills of material that are, at the time of the assessment, made available to the Agency or are otherwise accessible via the internet; (II) software inventories, available to the Director at the time of the assessment, from the Continuous Diagnostics and Mitigation program of the Agency; and (III) other publicly available information regarding open source software components