Government Accountability Office report

Not later than 1 year after the date of the enactment of this Act, and not less frequently than every two years until the date of the termination of the Program under section 402(n), the Comptroller General of the United States should conduct and submit to the appropriate congressional committees a review of the Program. The review should include an assessment of the Department of State’s implementation of the Program, including— (1) the Department of State’s capacity to implement the Program, including personnel and budgetary resources; (2) whether the Department of State has established the necessary processes and procedures to successfully achieve the Program objectives outlined in section 402; (3) the Department of State’s ability to conduct appropriate monitoring and evaluation of Program implementation; (4) any technologies added or removed from the list under section 402(c) of covered cyber and digital technologies; and (5) any other elements deemed necessary by the Comptroller General of the United States.