; and (B) the Office of Federal Financial Management shall promulgate regulations under title 2, Code of Federal Regulations, as appropriate, relating to the responsibilities of grantees to comply with subsection (a)(2). (2) Implementation Not later than 1 year after the date on which the Federal Acquisition Regulatory Council and the Office of Federal Financial Management promulgate regulations under paragraph (1), the head of each agency shall implement policies and procedures, as appropriate, necessary to implement those regulations. (c) Responsibilities of CISA The Director of the Cybersecurity and Infrastructure Security Agency shall— (1) provide support to agencies with respect to the implementation of the requirements of this section; (2) develop tools, processes, and other mechanisms determined appropriate to offer agencies capabilities to implement the requirements of this section