; (iii) interface with the open source software community; and (iv) manage and reduce risks of using open source software at the covered agency. (2) Selection of pilot agencies The Director, in coordination with the National Cyber Director, the Director of the Cybersecurity and Infrastructure Security Agency, and the Administrator of General Services, shall select not less than 1 and not more than 5 covered agencies to conduct the pilot described in paragraph (1). (3) Assessment Not later than 1 year after the establishment of the pilot open source functions described in paragraph (1), the Director, in coordination with the National Cyber Director, the Director of the Cybersecurity and Infrastructure Security Agency, and the Administrator of General Services, shall assess whether open source functions should be established at some or all covered agencies, including— (A) how to organize those functions within covered agencies, such as the creation of open source program offices; and (B) appropriate roles and responsibilities for those functions. (4) Guidance Notwithstanding the termination of the pilot open source functions under paragraph (5), if the Director determines, based on the assessment described in paragraph (3), that some or all of the open source functions should be established at some or all covered agencies, the Director, in coordination with the National Cyber Director, the Director of the Cybersecurity and Infrastructure Security Agency, and the Administrator of General Services, shall issue guidance on the implementation of those functions. (5) Termination The pilot open source functions described in paragraph (1) shall terminate not later than 4 years after the establishment of the pilot open source functions. (d) Briefing and report The Director shall— (1) not later than 1 year after the date of enactment of this Act, brief the appropriate congressional committees on the guidance issued under subsection (b)