; and (B) the commercial availability of tools, frameworks, best practices, and other resources for enabling such customers to evaluate cybersecurity risk and price tradeoffs. (3) A discussion of the degree to which providers of mobile service have implemented cybersecurity best practices and risk assessment frameworks. (4) An estimate and discussion of the prevalence and efficacy of encryption and authentication algorithms and techniques used in each of the following: (A) Mobile service. (B) Mobile communications equipment or services. (C) Commonly used mobile phones and other mobile devices. (D) Commonly used mobile operating systems and communications software and applications. (5) A discussion of the barriers for providers of mobile service to adopt more efficacious encryption and authentication algorithms and techniques and to prohibit the use of older encryption and authentication algorithms and techniques with established vulnerabilities in mobile service, mobile communications equipment or services, and mobile phones and other mobile devices. (6) An estimate and discussion of the prevalence, usage, and availability of technologies that authenticate legitimate mobile service and mobile communications equipment or services to which mobile phones and other mobile devices are connected. (7) An estimate and discussion of the prevalence, costs, commercial availability, and usage by adversaries in the United States of cell site simulators (often known as international mobile subscriber identity catchers) and other mobile service surveillance and interception technologies. (c) Consultation In preparing the report required by subsection (a), the Under Secretary shall, to the degree practicable, consult with— (1) the Commission; (2) the National Institute of Standards and Technology; (3) the intelligence community; (4) the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security; (5) the Science and Technology Directorate of the Department of Homeland Security