; (4) coordination by the Administration Chief Information Officer with centers and mission directorates to ensure that information technology policies are effectively and efficiently implemented across the Administration; (5) a plan to increase the efficiency and effectiveness of information technology investments, including a description of how unnecessarily duplicative, wasteful, legacy, or outdated information technology across the Administration will be identified and eliminated, and a schedule for the identification and elimination of such information technology; (6) a plan for improving the information security of Administration information and Administration information systems, including improving security control assessments and role-based security training of employees; and (7) submission by the Administration to Congress of information regarding high risk projects and cybersecurity risks. (d) Congressional Oversight The Administrator shall submit to the appropriate committees of Congress the strategic plan under subsection (a) and any updates to the strategic plan. 71753. Information security plan for cybersecurity (a) In General Not later than 1 year after March 21, 2017, the Administrator shall implement the information security plan developed under subsection (b) and take such further actions as the Administrator considers necessary to improve the information security system in accordance with this section. (b) Information Security Plan Subject to subsections (c) and (d), the Administrator shall develop an Administration-wide information security plan to enhance information security for Administration information and information infrastructure. (c) Requirements In developing the plan under subsection (b), the Administrator shall ensure that the plan— (1) reflects the unique nature of the Administration’s mission and expertise; (2) is informed by policies, standards, guidelines, and directives on information security required for Federal agencies