The Secretary shall, on an annual basis, conduct a comprehensive assessment of the vulnerability of Department facilities to terrorist attack.

Not later than January 31 each year, the Secretary shall submit to Congress a report on the assessment conducted under subsection (a) during the preceding year. Each report shall include the results of the assessment covered by such report, together with such findings and recommendations as the Secretary considers appropriate.