Requirements Report

(1) Lab action; (2) Don't see reference to time-and-date stamp in audit logs.; (3) ; (4) Updated; (5) Acceptable; (6) Found test case citation in Appendix E. In future please attach test case to requirement.;

2.1.5.1.a.iv

(1) Acceptable;

2.1.5.1.a.v

(1) Acceptable;

2.1.5.1.a.vi

(1) Acceptable;

2.1.5.1.a.vii

(1) Acceptable;

2.1.5.1.b.i

(1) Acceptable;

2.1.5.1.b.ii

(1) Acceptable;

2.1.5.1.b.iii

(1) Acceptable;

2.1.5.1.b.iv

(1) Acceptable;

2.1.5.1.b.v

(1) Acceptable;

2.1.5.1.b.vi

(1) Acceptable;

2.1.5.1.b.vii

(1) Acceptable;

2.1.5.1.c

(1) Acceptable;

2.1.5.2

Further requirements must be applied to Commercial-off-the-Shelf operating systems to ensure completeness and integrity of audit data for election software. These operating systems are capable of exec...

(1) Lab action; (2) Where is this cited in A.3? Why not reference to Security appendix A.4?; (3) ; (4) Updated; (5) Acceptable;

2.1.6

The Election Management System (EMS) is used to prepare ballots and programs for use in casting and counting votes, and to consolidate, report, and display election results. An EMS shall generate and ...

(1) Acceptable;

2.1.7

Each voting system shall have a vote tabulation program that will meet specific functional requirements....

(1) This requirement is not applicable to the current system.;

2.1.7.1

The vote tabulating program software resident in each voting machine, vote count server, or other devices shall include all software modules required to: a. Monitor system status and generate machi...

(1) Acceptable;

2.1.7.1.a

(1) Acceptable;

2.1.7.1.b

The vote tabulating program software resident in each voting machine, vote count server, or other devices shall include all software modules required to: b. Accommodate device control functions per...

(1) Acceptable;

2.1.7.1.c

The vote tabulating program software resident in each voting machine, vote count server, or other devices shall include all software modules required to: c. Register and accumulate votes...

(1) Acceptable;

2.1.7.1.d

The vote tabulating program software resident in each voting machine, vote count server, or other devices shall include all software modules required to: d. Accommodate variations in ballot countin...

(1) Acceptable;

2.1.7.2

There are significant variations among state election laws with respect to permissible ballot contents, voting options, and the associated ballot counting logic. The Technical Data Package accompanyin...

(1) Acceptable;

2.1.8

For all voting systems, each piece of voting equipment that tabulates ballots shall provide a counter that: a. Can be set to zero before any ballots are submitted for tally b. Records the number...

(1) This requirement is not applicable to the current system.;

2.1.8.a

For all voting systems, each piece of voting equipment that tabulates ballots shall provide a counter that: a. Can be set to zero before any ballots are submitted for tally...

(1) Acceptable;

2.1.8.b

For all voting systems, each piece of voting equipment that tabulates ballots shall provide a counter that: b. Records the number of ballots cast during a particular test cycle or election...

(1) Acceptable;

2.1.8.c

For all voting systems, each piece of voting equipment that tabulates ballots shall provide a counter that: c. Increases the count only by the input of a ballot...

(1) Acceptable;

2.1.8.d

For all voting systems, each piece of voting equipment that tabulates ballots shall provide a counter that: d. Prevents or disables the resetting of the counter by any person other than authorized ...

(1) Acceptable;

2.1.8.e

For all voting systems, each piece of voting equipment that tabulates ballots shall provide a counter that: e. Is visible to designated election officials...

(1) Acceptable;

2.1.10

United States Code Title 42, Sections 1974 through 1974e state that election administrators shall preserve for 22 months â€œall records and paper that came into (their) possession relating to an appli...

(1) Acceptable;

2.2

This subsection defines capabilities required to support functions performed prior to the opening of polls. All voting systems shall provide capabilities to support: Ballot preparation Election pr...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

2.2.1

Ballot preparation is the process of using election databases to define the specific contests, questions, and related instructions to be contained in ballots and to produce all permissible ballot layo...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

2.2.1.1

All systems shall provide the general capabilities for ballot preparation. All systems shall be capable of: a. Enabling the automatic formatting of ballots in accordance with the requirements for o...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

2.2.1.1.a

(1) Acceptable;

2.2.1.1.b.i

All systems shall provide the general capabilities for ballot preparation. All systems shall be capable of: b. Collecting and maintaining the following data i. Offices and their associated label...

(1) Acceptable;

2.2.1.1.b.ii

All systems shall provide the general capabilities for ballot preparation. All systems shall be capable of: b. Collecting and maintaining the following data ii. Candidate names and their associa...

(1) Acceptable;

2.2.1.1.b.iii

All systems shall provide the general capabilities for ballot preparation. All systems shall be capable of: b. Collecting and maintaining the following data iii. Issues or measures and their ass...

(1) Acceptable;

2.2.1.1.c

All systems shall provide the general capabilities for ballot preparation. All systems shall be capable of: c. Supporting the maximum number of potentially active voting positions as indicated in t...

(1) Acceptable;

2.2.1.1.d

All systems shall provide the general capabilities for ballot preparation. All systems shall be capable of: d. For a primary election, generating ballots that segregate the choices in partisan cont...

(1) Acceptable;

2.2.1.1.e

All systems shall provide the general capabilities for ballot preparation. All systems shall be capable of: e. Generating ballots that contain identifying codes or marks uniquely associated with ea...

(1) Acceptable;

2.2.1.1.f

All systems shall provide the general capabilities for ballot preparation. All systems shall be capable of: f. Ensuring that vote response fields, selection buttons, or switches properly align with...

(1) Acceptable;

2.2.1.1.g

All systems shall provide the general capabilities for ballot preparation. All systems shall be capable of: Paper-based voting systems shall also meet the following requirements applicable to the t...

(1) Acceptable;

2.2.1.1.h

(1) Acceptable;

2.2.1.2

Ballot formatting is the process by which election officials or their designees use election databases and voting system software to define the specific contests and related instructions contained on ...

(1) This requirement is not applicable to the current system.;

2.2.1.2.a

(1) Acceptable;

2.2.1.2.b

(1) Acceptable;

2.2.1.2.c

(1) Acceptable;

2.2.1.2.d

(1) Acceptable;

2.2.1.2.e

(1) Acceptable;

2.2.1.2.f

(1) Acceptable;

2.2.1.2.g

(1) Acceptable;

2.2.1.3

Ballot production is the process of converting ballot formats to a media ready for use in the physical ballot production or electronic presentation. The voting system shall provide a means of print...

(1) This requirement is not applicable to the current system.;

2.2.1.3.a

(1) Acceptable;

2.2.1.3.b

(1) Acceptable;

2.2.1.3.c

(1) Acceptable;

2.2.1.3.ts

Ballot production is the process of converting ballot formats to a media ready for use in the physical ballot production or electronic presentation. Vendor documentation for marksense systems shall...

(1) Acceptable;

2.2.2

Election programming is the process by which election officials or their designees use election databases and vendor system software to logically define the voter choices associated with the contents ...

(1) This requirement is not applicable to the current system.;

2.2.2.a

(1) Acceptable;

2.2.2.b

(1) Acceptable;

2.2.2.c

(1) Acceptable;

2.2.2.d

(1) Acceptable;

2.2.2.e

(1) Acceptable;

2.2.3

All systems shall provide a means of installing ballots and programs on each piece of polling place or central count equipment in accordance with the ballot requirements of the election and the requir...

(1) This requirement is not applicable to the current system.;

2.2.3.a

(1) Acceptable;

2.2.3.b

(1) Acceptable;

2.2.3.c

(1) Acceptable;

2.2.4

Election personnel conduct voting equipment and voting system readiness tests prior to the start of an election to ensure that the voting system functions properly, to confirm that voting equipment ha...

(1) Acceptable;

2.2.4.a

(1) Acceptable;

2.2.4.b

(1) Acceptable;

2.2.4.c

(1) Acceptable;

2.2.4.d

(1) Acceptable;

2.2.4.e

(1) Acceptable;

2.2.4.f

(1) Acceptable;

2.2.4.g

(1) Acceptable;

2.2.4.h

(1) Acceptable;

2.2.4.i

(1) Acceptable;

2.2.4.j

(1) Acceptable;

2.2.5

Election officials perform verification at the polling place to ensure that all voting systems and voting equipment function properly before and during an election. All voting systems shall provide a ...

(1) This requirement is not applicable to the current system.;

2.2.5.a

(1) Acceptable;

2.2.5.b

(1) Acceptable;

2.2.5.c

(1) Acceptable;

2.2.5.d

(1) Acceptable;

2.2.5.e

(1) Acceptable;

2.2.5.f

(1) Acceptable;

2.2.5.g

(1) Acceptable;

2.2.5.h

(1) Acceptable;

2.2.5.i

(1) Acceptable;

2.2.5.ts

(1) This requirement is not applicable to the current system.;

2.2.6

Election officials perform verification at the central location to ensure that vote counting and vote consolidation equipment and software function properly before and after an election. Upon verifica...

(1) This requirement is not applicable to the current system.;

2.2.6.a

(1) Acceptable;

2.2.6.b

(1) Acceptable;

2.2.6.c

(1) Acceptable;

2.3.1

The capabilities required for opening the polls are specific to individual voting system technologies. At a minimum, the systems shall provide the functional capabilities indicated below....

(1) This requirement is not applicable to the current system.;

2.3.1.1

To allow voting devices to be activated for voting, all precinct count systems shall provide: a. An internal test or diagnostic capability to verify that all of the polling place tests specified in...

(1) Acceptable;

2.3.1.1.a

(1) Acceptable;

2.3.1.1.b

To allow voting devices to be activated for voting, all precinct count systems shall provide: b. Automatic disabling of any device that has not been tested until it has been tested...

(1) Acceptable;

2.3.1.2

To facilitate opening the polls, all paper-based systems shall include: a. A means of verifying that ballot marking devices are properly prepared and ready to use b. A voting booth or similar fa...

(1) This requirement is not applicable to the current system.;

2.3.1.2.a

To facilitate opening the polls, all paper-based systems shall include: a. A means of verifying that ballot marking devices are properly prepared and ready to use...

(1) Acceptable;

2.3.1.2.b

To facilitate opening the polls, all paper-based systems shall include: b. A voting booth or similar facility, in which the voter may mark the ballot in privacy...

(1) Acceptable;

2.3.1.2.c

To facilitate opening the polls, all paper-based systems shall include: c. Secure receptacles for holding voted ballots...

(1) Acceptable;

2.3.1.2.d

To facilitate opening the polls, all paper-based systems shall include: In addition to the above requirements, all paper-based precinct count equipment shall include a means of: d. Activating th...

(1) Acceptable;

2.3.1.2.e

To facilitate opening the polls, all paper-based systems shall include: In addition to the above requirements, all paper-based precinct count equipment shall include a means of: e. Verifying tha...

(1) Acceptable;

2.3.1.2.f

To facilitate opening the polls, all paper-based systems shall include: In addition to the above requirements, all paper-based precinct count equipment shall include a means of: f. Identifying d...

(1) Acceptable;

2.3.1.3

To facilitate opening the polls, all DRE systems shall include: a. A security seal, a password, or a data code recognition capability to prevent the inadvertent or unauthorized actuation of the pol...

(1) This requirement is not applicable to the current system.;

2.3.1.3.a

(1) This requirement is not applicable to the current system.;

2.3.1.3.b

To facilitate opening the polls, all DRE systems shall include: b. A means of enforcing the execution of steps in the proper sequence if more than one step is required...

(1) This requirement is not applicable to the current system.;

2.3.1.3.c

To facilitate opening the polls, all DRE systems shall include: c. A means of verifying the system has been activated correctly...

(1) This requirement is not applicable to the current system.;

2.3.1.3.d

To facilitate opening the polls, all DRE systems shall include: d. A means of identifying system failure and any corrective action needed...

(1) This requirement is not applicable to the current system.;

2.3.2

To activate the ballot, all DRE systems shall: a. Enable election officials to control the content of the ballot presented to the voter, whether presented in printed form or electronic display, suc...

(1) This requirement is not applicable to the current system.;

2.3.2.a

(1) This requirement is not applicable to the current system.;

2.3.2.b

To activate the ballot, all DRE systems shall: b. Allow each eligible voter to cast a ballot...

(1) This requirement is not applicable to the current system.;

2.3.2.c

To activate the ballot, all DRE systems shall: c. Prevent a voter from voting on a ballot to which he or she is not entitled...

(1) This requirement is not applicable to the current system.;

2.3.2.d

To activate the ballot, all DRE systems shall: d. Prevent a voter from casting more than one ballot in the same election...

(1) This requirement is not applicable to the current system.;

2.3.2.e

To activate the ballot, all DRE systems shall: e. Activate the casting of a ballot in a general election...

(1) This requirement is not applicable to the current system.;

2.3.2.f

To activate the ballot, all DRE systems shall: f. Enable the selection of the ballot that is appropriate to the party affiliation declared by the voter in a primary election...

(1) This requirement is not applicable to the current system.;

2.3.2.g

To activate the ballot, all DRE systems shall: g. Activate all portions of the ballot upon which the voter is entitled to vote...

(1) This requirement is not applicable to the current system.;

2.3.2.h

To activate the ballot, all DRE systems shall: h. Disable all portions of the ballot upon which the voter is not entitled to vote...

(1) This requirement is not applicable to the current system.;

2.3.3

Some required capabilities for casting a ballot are common to all systems. Others are specific to individual voting technologies or intended use. Systems must provide additional functional capabilitie...

(1) This requirement is not applicable to the current system.;

2.3.3.1

To facilitate casting a ballot, all systems shall: a. Provide text that is at least 3 millimeters high and provide the capability to adjust or magnify the text to an apparent size of 6.3 millimeter...

(1) Acceptable;

2.3.3.1.a

(1) Acceptable;

2.3.3.1.b

To facilitate casting a ballot, all systems shall: b. Protect the secrecy of the vote such that the system cannot reveal any information about how a particular voter voted, except as otherwise requ...

(1) Acceptable;

2.3.3.1.c

To facilitate casting a ballot, all systems shall: c. Record the selection and non-selection of individual vote choices for each contest and ballot measure...

(1) Acceptable;

2.3.3.1.d

To facilitate casting a ballot, all systems shall: d. Record the voterâ€™s selection of candidates whose names do not appear on the ballot, if permitted under state law, and record as many write-in...

(1) Acceptable;

2.3.3.1.e

To facilitate casting a ballot, all systems shall: e. In the event of a failure of the main power supply external to the voting system, provide the capability for any voter who is voting at the tim...

(1) Acceptable;

2.3.3.1.f

To facilitate casting a ballot, all systems shall: f. Provide the capability for voters to continue casting ballots in the event of a failure of a telecommunications connection within the polling p...

(1) This requirement is not applicable to the current system.;

2.3.3.2

All paper-based systems shall: a. Allow the voter to easily identify the voting field that is associated with each candidate or ballot measure response b. Allow the voter to mark the ballot to r...

(1) This requirement is not applicable to the current system.;

2.3.3.2.a

All paper-based systems shall: a. Allow the voter to easily identify the voting field that is associated with each candidate or ballot measure response...

(1) Acceptable;

2.3.3.2.b

All paper-based systems shall: b. Allow the voter to mark the ballot to register a vote...

(1) Acceptable;

2.3.3.2.c

All paper-based systems shall: c. Allow either the voter or the appropriate election official to place the voted ballot into the ballot counting device (for precinct count systems) or into a secure...

(1) Acceptable;

2.3.3.2.d

All paper-based systems shall: d. Protect the secrecy of the vote throughout the process...

(1) Acceptable;

2.3.3.2.e

All paper-based systems shall: In addition to the above requirements, all paper-based precinct count systems shall: e. Provide feedback to the voter that identifies specific contests for which h...

(1) Acceptable;

2.3.3.2.f

All paper-based systems shall: In addition to the above requirements, all paper-based precinct count systems shall: f. Notify the voter if he or she has made more than the allowable number of se...

(1) Acceptable;

2.3.3.2.g

All paper-based systems shall: In addition to the above requirements, all paper-based precinct count systems shall: g. Notify the voter before the ballot is cast and counted of the effect of mak...

(1) Acceptable;

2.3.3.2.h

All paper-based systems shall: In addition to the above requirements, all paper-based precinct count systems shall: h. Provide the voter opportunity to correct the ballot for either an undervote...

(1) Acceptable;

2.3.3.3

In addition to the above common requirements, DRE systems shall: a. Prohibit the voter from accessing or viewing any information on the display screen that has not been authorized by election offic...

(1) This requirement is not applicable to the current system.;

2.3.3.3.a

(1) This requirement is not applicable to the current system.;

2.3.3.3.b

In addition to the above common requirements, DRE systems shall: b. Enable the voter to easily identify the selection button or switch, or the active area of the ballot display, that is associated ...

(1) This requirement is not applicable to the current system.;

2.3.3.3.c

In addition to the above common requirements, DRE systems shall: c. Allow the voter to select his or her preferences on the ballot in any legal number and combination...

(1) This requirement is not applicable to the current system.;

2.3.3.3.d

In addition to the above common requirements, DRE systems shall: d. Indicate that a selection has been made or canceled...

(1) This requirement is not applicable to the current system.;

2.3.3.3.e

In addition to the above common requirements, DRE systems shall: e. Indicate to the voter when no selection, or an insufficient number of selections, has been made for a contest (e.g., undervotes)...

(1) This requirement is not applicable to the current system.;

2.3.3.3.f

In addition to the above common requirements, DRE systems shall: f. Notify the voter if he or she has made more than the allowable number of selections for any contest (e.g., overvotes)...

(1) This requirement is not applicable to the current system.;

2.3.3.3.g

In addition to the above common requirements, DRE systems shall: g. Notify the voter before the ballot is cast and counted of the effect of making more than the allowable number of selections for a...

(1) This requirement is not applicable to the current system.;

2.3.3.3.h

In addition to the above common requirements, DRE systems shall: h. Provide the voter opportunity to correct the ballot for either an undervote or overvote before the ballot is cast and counted...

(1) This requirement is not applicable to the current system.;

2.3.3.3.i

In addition to the above common requirements, DRE systems shall: i. Notify the voter when the selection of candidates and measures is completed...

(1) This requirement is not applicable to the current system.;

2.3.3.3.j

In addition to the above common requirements, DRE systems shall: j. Allow the voter, before the ballot is cast, to review his or her choices and, if the voter desires, to delete or change his or he...

(1) This requirement is not applicable to the current system.;

2.3.3.3.k

In addition to the above common requirements, DRE systems shall: k. For electronic image displays, prompt the voter to confirm the voter's choices before casting his or her ballot, signifying to th...

(1) This requirement is not applicable to the current system.;

2.3.3.3.l

In addition to the above common requirements, DRE systems shall: l. Notify the voter after the vote has been stored successfully that the ballot has been cast...

(1) This requirement is not applicable to the current system.;

2.3.3.3.m

In addition to the above common requirements, DRE systems shall: m. Notify the voter that the ballot has not been cast successfully if it is not stored successfully, including storage of the ballot...

(1) This requirement is not applicable to the current system.;

2.3.3.3.n

In addition to the above common requirements, DRE systems shall: n. Provide sufficient computational performance to provide responses back to each voter entry in no more than three seconds...

(1) This requirement is not applicable to the current system.;

2.3.3.3.o

In addition to the above common requirements, DRE systems shall: o. Ensure that the votes stored accurately represent the actual votes cast...

(1) This requirement is not applicable to the current system.;

2.3.3.3.p

In addition to the above common requirements, DRE systems shall: p. Prevent modification of the voterâ€™s vote after the ballot is cast...

(1) This requirement is not applicable to the current system.;

2.3.3.3.q

In addition to the above common requirements, DRE systems shall: q. Provide a capability to retrieve ballot images in a form readable by humans [in accordance with the requirements of Subsections 2...

(1) This requirement is not applicable to the current system.;

2.3.3.3.r

In addition to the above common requirements, DRE systems shall: r. Increment the proper ballot position registers or counters...

(1) This requirement is not applicable to the current system.;

2.3.3.3.s

In addition to the above common requirements, DRE systems shall: s. Protect the secrecy of the vote throughout the voting process...

(1) This requirement is not applicable to the current system.;

2.3.3.3.t

In addition to the above common requirements, DRE systems shall: t. Prohibit access to voted ballots until after the close of polls...

(1) This requirement is not applicable to the current system.;

2.3.3.3.u

In addition to the above common requirements, DRE systems shall: u. Provide the ability for election officials to submit test ballots for use in verifying the end-to-end integrity of the voting sys...

(1) This requirement is not applicable to the current system.;

2.3.3.3.v

In addition to the above common requirements, DRE systems shall: v. Isolate test ballots such that they are accounted for accurately in vote counts and are not reflected in official vote counts for...

(1) This requirement is not applicable to the current system.;

2.4

All voting systems shall provide capabilities to accumulate and report results for the jurisdiction and to generate audit trails. In addition, precinct count voting systems must provide a means to clo...

(1) This requirement is not applicable to the current system.;

2.4.1

These requirements for closing the polls and locking voting systems against future voting are specific to precinct count systems. The voting system shall provide the means for: a. Preventing the fu...

(1) Acceptable;

2.4.1.a

(1) Acceptable;

2.4.1.b

(1) Acceptable;

2.4.1.c

(1) Acceptable;

2.4.1.d

(1) Acceptable;

2.4.1.e

(1) Acceptable;

2.4.2

All systems shall provide a means to consolidate vote data from all polling places, and optionally from other sources such as absentee ballots, provisional ballots, and voted ballots requiring human r...

(1) Acceptable;

2.4.3

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: a. Support geographic reporting, which requires the reporting o...

(1) This requirement is not applicable to the current system.;

2.4.3.a

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: a. Support geographic reporting, which requires the reporting o...

(1) Acceptable;

2.4.3.b

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: b. Produce a printed report of the number of ballots counted by...

(1) Acceptable;

2.4.3.c

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: c. Produce a printed report for each tabulator of the results o...

(1) Lab action; (2) I do not see in the docs cited or the test cases mention of reporting on undervotes and overvotes.; (3) ; (4) Updated; (5) Lab action; (6) Found it in POST_TC-17 Print and Verify Precinct Summary.pdf test case. Matrix cites test case PRE_TC-DOM-93. Cannot find that test case in VRT. Should 93 be 39?; (7) ; (8) No PRE_TC-DOM-93 is correct, this is a test case checking the ability to upgrade reports; I will add it to the test cases linked to this requirement for coverage; (9) Test case link updated; (10) Acceptable;

2.4.3.d

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: d. Produce a consolidated printed report of the results for eac...

(1) Lab action; (2) Same as previous requirement.; (3) ; (4) Updated; (5) Acceptable;

2.4.3.e

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: e. Be capable of producing a consolidated printed report of the...

(1) Lab action; (2) Same as d and f.; (3) ; (4) Updated; (5) Acceptable;

2.4.3.f

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: f. Produce all system audit information required in Subsection ...

(1) Acceptable;

2.4.3.g

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: g. Prevent data from being altered or destroyed by report gener...

(1) Acceptable;

2.4.3.h

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: In addition, all precinct count voting systems shall: h. Pre...

(1) Acceptable;

2.4.3.i

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: In addition, all precinct count voting systems shall: i. Pro...

(1) Acceptable;

2.4.3.j

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: In addition, all precinct count voting systems shall: j. Con...

(1) Acceptable;

2.4.3.k

All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to: In addition, all precinct count voting systems shall: k. Pre...

(1) Acceptable;

2.4.4

Some voting systems offer the capability to make unofficial results available to external organizations such as the news media, political party officials, and others. Although this capability is not r...

(1) This requirement is not applicable to the current system.;

2.4.4.a

(1) Acceptable;

2.4.4.b

(1) Acceptable;

2.4.4.c

(1) Acceptable;

2.5

All systems shall be designed and manufactured to facilitate preventive and corrective maintenance, conforming to the hardware standards described in Subsection 4.1. All vote casting and tally equipme...

(1) This requirement is not applicable to the current system.;

2.5.a

(1) Acceptable;

2.5.b

(1) Acceptable;

1.3.1.4

The functionality, hardware, and software certification tests supplement a fuller evaluation performed by the system level integration tests. System level tests focus on these aspects jointly, through...

(1) Lab action; (2) Need reference to PCA.; (3) ; (4) Updated; (5) Acceptable;

1.7.1

Voting system hardware, software, communications and documentation are examined and tested to determine suitability for elections use. Examination and testing addresses the broad range of system funct...

(1) Acceptable;

3.2.1

(1) Acceptable;

3.2.2

Voting systems are not designed according to a standard design template. Instead, system design reflects the vendorâ€™s selections from a variety of technologies and design configurations. Such variat...

(1) Acceptable;

3.2.4

(1) This requirement is not applicable to the current system.; (2) This is a new system.; (3) Acceptable;

3.3

There is no required sequence for performing the system certification tests. For a system not previously certified, the accredited test lab may perform tests using generic test ballots, and schedule t...

(1) Lab action; (2) Needs citation.; (3) Acceptable;

3.3.1

(1) Lab action; (2) Need citation.; (3) Acceptable;

3.3.2

For testing voting functions defined in Volume I, Sections 2, the following procedures shall be performed during the functional tests. a. The procedure to prepare election programs shall: i. Ver...

(1) Lab action; (2) Need citation.; (3) Acceptable;

3.5

For systems intended to use non-standard voting devices, such as a personal computer, provided by the local jurisdiction, the accredited test lab shall conduct functionality tests using hardware provi...

(1) Lab action; (2) Need citation.; (3) Acceptable;

6.2.1

(1) Lab action; (2) Need citation.; (3) Acceptable;

6.2.3

For all systems, the total number of ballots to be processed by each precinct counting device during these tests shall reflect the maximum number of active voting positions and the maximum number of b...

(1) Lab action; (2) Need citation.; (3) Acceptable;

6.3

(1) Acceptable; (2) Lab action; (3) Cite Attachement D (test plan); (4) Acceptable;

6.6

(1) Lab action; (2) Need citation.; (3) Acceptable;

6.7

(1) Lab action; (2) Need citation.; (3) Acceptable;

A.4.3.5

The test lab shall provide a description of system tests of both the software and hardware. For software, these tests shall be designed according to the stated design objective without consideration o...

(1) Lab action; (2) Need citation.; (3) ; (4) Updated; (5) Acceptable;

1. Lab 2. Functional 3. Usability 4. Hardware 5. Software 6. Telecomm 7. Security 8. QA 9. CM

Usability Requirements

Vol

Citation

Text (click to see full text)

Status

Comments

3.0

The importance of usability and accessibility in the design of voting systems has become increasingly apparent. It is not sufficient that the internal operation of these systems be correct; in additio...

(1) This requirement is not applicable to the current system.;

3.1

The voting process shall provide a high level of usability for voters. Accordingly, voters shall be able to negotiate the process effectively, efficiently, and comfortably. The mandatory voting system...

(1) Acceptable;

3.1.1

The vendor shall conduct summative usability tests on the voting system using individuals representative of the general population. The vendor shall document the testing performed and report the test ...

(1) Applicable Requirement; (2) Acceptable; (3) Asking for minor revisions, but no substantive issues. See comment on Appendix A.12-1 and A.12-2.;

3.1.2

The voting process shall provide certain functional capabilities to support voter usability. a. The voting system shall provide feedback to the voter that identifies specific contests or ballot iss...

(1) This requirement is not applicable to the current system.;

3.1.2.a

(1) Acceptable;

3.1.2.b

The voting process shall provide certain functional capabilities to support voter usability. b. The voting system shall notify the voter if he or she has made more than the allowable number of sele...

(1) Acceptable;

3.1.2.c

The voting process shall provide certain functional capabilities to support voter usability. c. The voting system shall notify the voter before the ballot is cast and counted of the effect of makin...

(1) Acceptable;

3.1.2.d

The voting process shall provide certain functional capabilities to support voter usability. d. The voting system shall provide the voter the opportunity to correct the ballot for either an undervo...

(1) Acceptable;

3.1.2.e

The voting process shall provide certain functional capabilities to support voter usability. e. The voting system shall allow the voter, at his or her choice, to submit an undervoted ballot without...

(1) Acceptable;

3.1.2.f

The voting process shall provide certain functional capabilities to support voter usability. f. DRE voting machines shall allow the voter to change a vote within a contest before advancing to the n...

(1) This requirement is not applicable to the current system.;

3.1.2.g

The voting process shall provide certain functional capabilities to support voter usability. g. DRE voting machines should provide navigation controls that allow the voter to advance to the next co...

(1) This requirement is not applicable to the current system.;

3.1.3

The voting equipment shall be capable of presenting the ballot, ballot selections, review screens and instructions in any language required by state or federal law. Discussion: HAVA Section 301 (a)...

(1) Acceptable;

3.1.4

The voting process shall be designed to minimize cognitive difficulties for the voter. a. Consistent with election law, the voting system should support a process that does not introduce any bias f...

(1) This requirement is not applicable to the current system.;

3.1.4.a

(1) Acceptable;

3.1.4.b

The voting process shall be designed to minimize cognitive difficulties for the voter. b. The voting machine or related materials shall provide clear instructions and assistance to allow voters to ...

(1) Acceptable;

3.1.4.b.i

(1) Acceptable;

3.1.4.b.ii

(1) Acceptable;

3.1.4.c.i

The voting process shall be designed to minimize cognitive difficulties for the voter. c. The voting system shall provide the capability to design a ballot for maximum clarity and comprehension. ...

(1) Acceptable;

3.1.4.c.ii

The voting process shall be designed to minimize cognitive difficulties for the voter. c. The voting system shall provide the capability to design a ballot for maximum clarity and comprehension. i...

(1) Acceptable;

3.1.4.c.iii

The voting process shall be designed to minimize cognitive difficulties for the voter. c. The voting system shall provide the capability to design a ballot for maximum clarity and comprehension. i...

(1) Acceptable;

3.1.4.d

The voting process shall be designed to minimize cognitive difficulties for the voter. d. Warnings and alerts issued by the voting system should clearly state the nature of the problem and the set ...

(1) Acceptable;

3.1.4.e

The voting process shall be designed to minimize cognitive difficulties for the voter. e. The use of color by the voting system should agree with common conventions: (a) green, blue or white is use...

(1) Acceptable;

3.1.5

The voting process shall be designed to minimize perceptual difficulties for the voter. a. No voting machine display screen shall flicker with a frequency between 2 Hz and 55 Hz. Discussion: Asi...

(1) This requirement is not applicable to the current system.;

3.1.5.a

The voting process shall be designed to minimize perceptual difficulties for the voter. a. No voting machine display screen shall flicker with a frequency between 2 Hz and 55 Hz. Discussion: Asi...

(1) Acceptable;

3.1.5.b

The voting process shall be designed to minimize perceptual difficulties for the voter. b. Any aspect of the voting machine that is adjustable by the voter or poll worker, including font size, colo...

(1) Acceptable;

3.1.5.c

The voting process shall be designed to minimize perceptual difficulties for the voter. c. If any aspect of a voting machine is adjustable by the voter or poll worker, there shall be a mechanism to...

(1) Acceptable;

3.1.5.d

The voting process shall be designed to minimize perceptual difficulties for the voter. d. All electronic voting machines shall provide a minimum font size of 3.0 mm (measured as the height of a ca...

(1) Acceptable;

3.1.5.e

The voting process shall be designed to minimize perceptual difficulties for the voter. e. All voting machines using paper ballots should make provisions for voters with poor reading vision. Dis...

(1) Acceptable;

3.1.5.f

The voting process shall be designed to minimize perceptual difficulties for the voter. f. The default color coding shall maximize correct perception by voters with color blindness. Discussion: ...

(1) Acceptable;

3.1.5.g

The voting process shall be designed to minimize perceptual difficulties for the voter. g. Color coding shall not be used as the sole means of conveying information, indicating an action, prompting...

(1) Acceptable;

3.1.5.h

The voting process shall be designed to minimize perceptual difficulties for the voter. h. All text intended for the voter should be presented in a sans serif font. Discussion: Experimentation h...

(1) Acceptable;

3.1.5.i

The voting process shall be designed to minimize perceptual difficulties for the voter. i. The minimum figure-to-ground ambient contrast ratio for all text and informational graphics (including ico...

(1) Acceptable;

3.1.6

The voting process shall be designed to minimize interaction difficulties for the voter. a. Voting machines with electronic image displays shall not require page scrolling by the voter. b. The v...

(1) This requirement is not applicable to the current system.;

3.1.6.a

The voting process shall be designed to minimize interaction difficulties for the voter. a. Voting machines with electronic image displays shall not require page scrolling by the voter....

(1) Acceptable;

3.1.6.b

The voting process shall be designed to minimize interaction difficulties for the voter. b. The voting machine shall provide unambiguous feedback regarding the voterâ€™s selection, such as displayi...

(1) Acceptable;

3.1.6.c

The voting process shall be designed to minimize interaction difficulties for the voter. c. If the voting machine requires a response by a voter within a specific period of time, it shall issue an ...

(1) Acceptable;

3.1.6.d.i

The voting process shall be designed to minimize interaction difficulties for the voter. d. Input mechanisms shall be designed to minimize accidental activation. i. On touch screens, the sensiti...

(1) Acceptable;

3.1.6.d.ii

The voting process shall be designed to minimize interaction difficulties for the voter. d. Input mechanisms shall be designed to minimize accidental activation. ii. No key or control on a votin...

(1) Acceptable;

3.1.7

The voting process shall preclude anyone else from determining the content of a voter's ballot, without the voter's cooperation. Discussion: Privacy ensures that the voter can make selections based...

(1) Acceptable;

3.1.7.1

When deployed according to the installation instructions provided by the vendor, the voting station shall prevent others from observing the contents of a voterâ€™s ballot. a. The ballot and any inp...

(1) This requirement is not applicable to the current system.;

3.1.7.1.a

(1) Acceptable;

3.1.7.1.b

When deployed according to the installation instructions provided by the vendor, the voting station shall prevent others from observing the contents of a voterâ€™s ballot. b. The audio interface sh...

(1) Acceptable;

3.1.7.1.c

When deployed according to the installation instructions provided by the vendor, the voting station shall prevent others from observing the contents of a voterâ€™s ballot. c. As mandated by HAVA 30...

(1) Acceptable;

3.1.7.2

Voter anonymity shall be maintained for alternative format ballot presentation. a. No information shall be kept within an electronic cast vote record that identifies any alternative language featur...

(1) This requirement is not applicable to the current system.;

3.1.7.2.a

(1) Acceptable;

3.1.7.2.b

Voter anonymity shall be maintained for alternative format ballot presentation. b. No information shall be kept within an electronic cast vote record that identifies any accessibility feature(s) us...

(1) Acceptable;

3.2

The voting process shall be accessible to voters with disabilities. As a minimum, every polling place shall have at least one voting station equipped for individuals with disabilities, as provided in ...

(1) This requirement is not applicable to the current system.;

3.2.1

The voting process shall incorporate the following features that are applicable to all types of disabilities: a. When the provision of accessibility involves an alternative format for ballot presen...

(1) This requirement is not applicable to the current system.;

3.2.1.a

(1) Acceptable;

3.2.1.b

The voting process shall incorporate the following features that are applicable to all types of disabilities: b. The support provided to voters with disabilities shall be intrinsic to the accessibl...

(1) Acceptable;

3.2.1.c

The voting process shall incorporate the following features that are applicable to all types of disabilities: c. When the primary means of voter identification or authentication uses biometric meas...

(1) Acceptable;

3.2.2.1

The accessible voting station shall be accessible to voters with partial vision. a. The vendor shall conduct summative usability tests on the voting system using partially sighted individuals. The ...

(1) This requirement is not applicable to the current system.;

3.2.2.1.a

(1) Acceptable;

3.2.2.1.b

The accessible voting station shall be accessible to voters with partial vision. b. The accessible voting station with an electronic image display shall be capable of showing all information in at ...

(1) Acceptable;

3.2.2.1.c

The accessible voting station shall be accessible to voters with partial vision. c. An accessible voting station with a monochrome-only electronic image display shall be capable of showing all info...

(1) This requirement is not applicable to the current system.; (2) Incorrectly marked as NA; was met TR citation in Appendix, A. 5 and Section 4.8.4 of report. ; (3) Acceptable; (4) Applicable Requirement; (5) Acceptable;

3.2.2.1.d

The accessible voting station shall be accessible to voters with partial vision. d. An accessible voting station with a color electronic image display shall allow the voter to adjust the color or t...

(1) Acceptable;

3.2.2.1.e

The accessible voting station shall be accessible to voters with partial vision. e. Buttons and controls on accessible voting stations shall be distinguishable by both shape and color. Discussio...

(1) Acceptable;

3.2.2.1.f

The accessible voting station shall be accessible to voters with partial vision. f. An accessible voting station using an electronic image display shall provide synchronized audio output to convey ...

(1) Acceptable;

3.2.2

The voting process shall be accessible to voters with visual disabilities. Discussion: Note that all aspects of the voting process are to be accessible, not just the voting machine....

(1) This requirement is not applicable to the current system.; (2) Applicable Requirement; (3) Incorrectly marked as NA; was met TR citation in Appendix, A. 5 and Section 4.8.4 of report.; (4) Acceptable;

3.2.2.2

The accessible voting station shall be accessible to voters who are blind. a. The vendor shall conduct summative usability tests on the voting system using individuals who are blind. The vendor sha...

(1) This requirement is not applicable to the current system.;

3.2.2.2.a

(1) Acceptable;

3.2.2.2.b.i

The accessible voting station shall be accessible to voters who are blind. b. The accessible voting station shall provide an audio-tactile interface (ATI) that supports the full functionality of th...

(1) Acceptable;

3.2.2.2.b.ii

(1) Acceptable;

3.2.2.2.b.iii

(1) Acceptable;

3.2.2.2.b.iv

(1) Acceptable;

3.2.2.2.b.v

(1) Acceptable;

3.2.2.2.c.i

The accessible voting station shall be accessible to voters who are blind. c. All voting stations that provide audio presentation of the ballot shall conform to the following requirements: Discu...

(1) Acceptable;

3.2.2.2.c.ii

The accessible voting station shall be accessible to voters who are blind. c. All voting stations that provide audio presentation of the ballot shall conform to the following requirements: Discu...

(1) Acceptable;

3.2.2.2.c.iii

The accessible voting station shall be accessible to voters who are blind. c. All voting stations that provide audio presentation of the ballot shall conform to the following requirements: Discu...

(1) Acceptable;

3.2.2.2.c.iv

The accessible voting station shall be accessible to voters who are blind. c. All voting stations that provide audio presentation of the ballot shall conform to the following requirements: Discu...

(1) Not Found; (2) ; (3) This has been updated ; (4) Acceptable;

3.2.2.2.c.ix

The accessible voting station shall be accessible to voters who are blind. c. All voting stations that provide audio presentation of the ballot shall conform to the following requirements: Discu...

(1) Acceptable;

3.2.2.2.c.v

The accessible voting station shall be accessible to voters who are blind. c. All voting stations that provide audio presentation of the ballot shall conform to the following requirements: Discu...

(1) Acceptable;

3.2.2.2.c.vi

The accessible voting station shall be accessible to voters who are blind. c. All voting stations that provide audio presentation of the ballot shall conform to the following requirements: Discu...

(1) Acceptable;

3.2.2.2.c.vii

The accessible voting station shall be accessible to voters who are blind. c. All voting stations that provide audio presentation of the ballot shall conform to the following requirements: Discu...

(1) Acceptable;

3.2.2.2.c.viii

The accessible voting station shall be accessible to voters who are blind. c. All voting stations that provide audio presentation of the ballot shall conform to the following requirements: Discu...

(1) Acceptable;

3.2.2.2.d

The accessible voting station shall be accessible to voters who are blind. d. If the normal procedure is to have voters initialize the activation of the ballot, the accessible voting station shall ...

(1) Acceptable;

3.2.2.2.e

The accessible voting station shall be accessible to voters who are blind. e. If the normal procedure is for voters to submit their own ballots, then the accessible voting station shall provide fea...

(1) Acceptable; (2) Applicable Requirement; (3) Waiting for response from DVS on general TR comment before accepting this and closing it.; (4) Acceptable;

3.2.2.2.f

The accessible voting station shall be accessible to voters who are blind. f. All mechanically operated controls or keys on an accessible voting station shall be tactilely discernible without activ...

(1) Acceptable;

3.2.2.2.g

The accessible voting station shall be accessible to voters who are blind. g. On an accessible voting station, the status of all locking or toggle controls or keys (such as the shift key) shall be ...

(1) Waiting for response from DVS on general TR comment before accepting this and closing it.; (2) Acceptable;

3.2.3

The voting process shall be accessible to voters who lack fine motor control or use of their hands. a. The vendor shall conduct summative usability tests on the voting system using individuals lack...

(1) This requirement is not applicable to the current system.;

3.2.3.a

(1) Acceptable;

3.2.3.b

The voting process shall be accessible to voters who lack fine motor control or use of their hands. b. All keys and controls on the accessible voting station shall be operable with one hand and sha...

(1) Acceptable;

3.2.3.c

The voting process shall be accessible to voters who lack fine motor control or use of their hands. c. The accessible voting station controls shall not require direct bodily contact or for the body...

(1) Acceptable;

3.2.3.d

The voting process shall be accessible to voters who lack fine motor control or use of their hands. d. The accessible voting station shall provide a mechanism to enable non-manual input that is fun...

(1) Acceptable;

3.2.3.e

The voting process shall be accessible to voters who lack fine motor control or use of their hands. e. If the normal procedure is for voters to submit their own ballots, then the accessible voting ...

(1) Acceptable;

3.2.4

The voting process shall be accessible to voters who use mobility aids, including wheelchairs. a. The accessible voting station shall provide a clear floor space of 30 inches (760 mm) minimum by 48...

(1) This requirement is not applicable to the current system.;

3.2.4.a

(1) Acceptable;

3.2.4.b.i

The voting process shall be accessible to voters who use mobility aids, including wheelchairs. b. All controls, keys, audio jacks and any other part of the accessible voting station necessary for t...

(1) Acceptable;

3.2.4.b.ii.b1

(1) Acceptable;

3.2.4.b.ii.b2

(1) EAC action item; (2) Acceptable;

3.2.4.b.iii.b1

(1) EAC action item; (2) Acceptable;

3.2.4.b.iii.b2

(1) EAC action item; (2) Acceptable;

3.2.4.b.iii.b3

(1) EAC action item; (2) Acceptable;

3.2.4.b.iv.b1

(1) EAC action item; (2) Acceptable;

3.2.4.b.iv.b2

(1) EAC action item; (2) Acceptable;

3.2.4.b.iv.b3

(1) EAC action item; (2) Acceptable;

3.2.4.b.iv.b4

(1) EAC action item; (2) Acceptable;

3.2.4.b.v

(1) Acceptable;

3.2.4.b.vi.b1

(1) Acceptable;

3.2.4.b.vi.b2

(1) Acceptable;

3.2.4.c

The voting process shall be accessible to voters who use mobility aids, including wheelchairs. c. All labels, displays, controls, keys, audio jacks, and any other part of the accessible voting stat...

(1) Acceptable;

3.2.5

The voting process shall be accessible to voters with hearing disabilities. a. The accessible voting station shall incorporate the features listed under requirement 3.2.2.2 (c) for voting equipment...

(1) This requirement is not applicable to the current system.;

3.2.5.a

(1) Acceptable;

3.2.5.b

The voting process shall be accessible to voters with hearing disabilities. b. If voting equipment provides sound cues as a method to alert the voter, the tone shall be accompanied by a visual cue,...

(1) Acceptable;

3.2.6

The voting process shall be accessible to voters with speech disabilities. a. No voting equipment shall require voter speech for its operation. Discussion: This does not preclude voting equipmen...

(1) Acceptable;

3.2.7

For voters who lack proficiency in reading English, or whose primary language is unwritten, the voting equipment shall provide spoken instructions and ballots in the preferred language of the voter, c...

(1) Acceptable;

3.2.8

The voting process should be accessible to voters with cognitive disabilities. Discussion: At present there are no design features specifically aimed at helping those with cognitive disabilities. R...

(1) Acceptable; (2) Mislabeled, see general comments on Test Report.;

6.5

(1) Lab action; (2) Need report citations; (3) Acceptable;

1. Lab 2. Functional 3. Usability 4. Hardware 5. Software 6. Telecomm 7. Security 8. QA 9. CM

Hardware Requirements

Vol

Citation

Text (click to see full text)

Status

Comments

4.0

This section contains the requirements for the machines and manufactured devices that are part of a voting system. It specifies minimum values for certain performance characteristics; physical charact...

(1) This requirement is not applicable to the current system.; (2) ok; (3) Acceptable; (4) Tested in subsections;

4.1

The performance requirements address a broad range of parameters, encompassing: â€¢ Accuracy requirements, where requirements are specified for distinct processing functions of paper-based and DRE ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.1

Voting system accuracy addresses the accuracy of data for each of the individual ballot positions that could be selected by a voter, including the positions that are not selected. For a voting system,...

(1) Acceptable;

4.1.1.a.i

(1) Acceptable;

4.1.1.a.ii

(1) Acceptable;

4.1.1.b.i

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no dre;

4.1.1.b.ii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no DRE;

4.1.1.c.i

(1) Acceptable;

4.1.1.d.i

(1) Acceptable;

4.1.2

The environmental requirements for voting systems include shelter, space, furnishings and fixtures, supplied energy, environmental control, and external telecommunications services. Environmental c...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Tested in subsections;

4.1.2.1

All precinct count systems shall be designed for storage and operation in any enclosed facility ordinarily used as a warehouse or polling place, with prominent instructions as to any special storage r...

(1) Acceptable;

4.1.2.2

There is no restriction on space allowed for the installation of voting systems, except that the arrangement of these systems shall not impede performance of their duties by polling place officials, t...

(1) Acceptable;

4.1.2.3

Any furnishings or fixtures provided as a part of voting systems, and any components provided by the vendor that are not a part of the voting system but that are used to support its storage, transport...

(1) Acceptable;

4.1.2.4

Components of voting systems that require an electrical supply shall meet the following standards: a. Precinct count voting systems shall operate with the electrical supply ordinarily found in poll...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.2.4.a

(1) Acceptable;

4.1.2.4.b

Components of voting systems that require an electrical supply shall meet the following standards: b. Central count voting systems shall operate with the electrical supply ordinarily found in centr...

(1) Acceptable;

4.1.2.4.c

Components of voting systems that require an electrical supply shall meet the following standards: c. All voting machines shall also be capable of operating for a period of at least 2 hours on back...

(1) Acceptable;

4.1.2.5

Vote scanning and counting equipment for paper-based voting systems, and all DRE voting equipment, shall be able to withstand, without disruption of normal operation or loss of data: a. Voltage dip...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.2.5.a

(1) Acceptable;

4.1.2.5.b

(1) Acceptable;

4.1.2.5.c

(1) Acceptable;

4.1.2.5.d

(1) Acceptable;

4.1.2.5.e

(1) Acceptable;

4.1.2.6

Vote scanning and counting equipment for paper-based systems, and all DRE equipment, shall be able to withstand, without disruption of normal operation or loss of data, electrical fast transients of: ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.2.6.a

(1) Acceptable;

4.1.2.6.b

(1) Acceptable;

4.1.2.6.c

(1) Acceptable;

4.1.2.7

Vote scanning and counting equipment for paper-based systems, and all DRE equipment, shall be able to withstand, without disruption of normal operation or loss of data, surges of: a. Â± 2 kV AC lin...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Tested in subsections;

4.1.2.7.a

(1) Acceptable;

4.1.2.7.b

(1) Acceptable;

4.1.2.7.c

(1) Acceptable;

4.1.2.7.d

(1) Acceptable;

4.1.2.7.e

(1) Acceptable;

4.1.2.8

Vote scanning and counting equipment for paper-based systems, and all DRE equipment, shall be able to withstand Â±15 kV air discharge and Â±8 kV contact discharge without damage or loss of data. The e...

(1) Acceptable;

4.1.2.9

Vote scanning and counting equipment for paper-based systems, and all DRE equipment, shall comply with the Rules and Regulations of the Federal Communications Commission, Part 15; Class B requirements...

(1) Acceptable;

4.1.2.10

Vote scanning and counting equipment for paper-based systems, and all DRE equipment, shall be able to withstand an electromagnetic field of 10 V/m modulated by a 1 kHz 80% AM modulation over the frequ...

(1) Acceptable;

4.1.2.11

Vote scanning and counting equipment for paper-based systems, and all DRE equipment, shall be able to withstand, without disruption of normal operation or loss of data, conducted RF energy of: a. 1...

(1) Acceptable;

4.1.2.11.a

(1) Acceptable;

4.1.2.11.b

(1) Acceptable;

4.1.2.12

Vote scanning and counting equipment for paper-based systems, and all DRE equipment, shall be able to withstand, without disruption of normal operation or loss of data, AC magnetic fields of 30 A/m at...

(1) Acceptable;

4.1.2.13

Equipment used for election management activities or vote counting (including both precinct and central count systems) shall be capable of operation in temperatures ranging from 50 to 95 degrees Fahre...

(1) Acceptable;

4.1.2.14

Equipment used for vote casting or for counting votes in a precinct count system, shall meet these specific minimum performance standards that simulate exposure to physical shock and vibration associa...

(1) Acceptable;

4.1.2.14.a

(1) Acceptable;

4.1.2.14.b

(1) Acceptable;

4.1.2.14.c

(1) Acceptable;

4.1.2.14.d

(1) Acceptable;

4.1.3

The Election Management System (EMS) requirements address electronic hardware and software used to conduct the pre-voting functions defined in Section 2 with regard to ballot preparation, election pro...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.3.1

Voting systems shall accurately record all election management data entered by the user, including election officials or their designees. For recording accuracy, all systems shall: a. Record every ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.3.1.a

(1) Acceptable;

4.1.3.1.b

(1) Acceptable;

4.1.3.1.c

(1) Acceptable;

4.1.3.1.d

(1) Acceptable;

4.1.3.1.e

(1) Acceptable;

4.1.3.1.f

(1) Acceptable;

4.1.3.1.g

(1) Acceptable;

4.1.3.2

Memory devices used to retain election management data shall have demonstrated error-free data retention for a period of 22 months....

(1) Acceptable;

4.1.4

The vote recording requirements address the enclosure, equipment, and supplies used by voters to vote....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.4.1

All voting systems shall provide voting booths or enclosures for poll site use. Such booths or enclosures may be integral to the voting system or supplied as components of the voting system, and shall...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.4.1.a

(1) Acceptable;

4.1.4.1.b

(1) Acceptable;

4.1.4.1.c

(1) Acceptable;

4.1.4.1.d

(1) Acceptable;

4.1.4.2

The paper-based recording requirements govern: â€¢ Ballot cards or sheets, and pages or assemblies of pages containing ballot field identification data â€¢ Ballot marking devices â€¢ Frames or fi...

(1) Acceptable;

4.1.4.2.a.i

(1) Acceptable;

4.1.4.2.a.ii

(1) Acceptable;

4.1.4.2.a.iii

(1) Acceptable;

4.1.4.2.b.i

(1) Acceptable;

4.1.4.2.b.ii

(1) Acceptable;

4.1.4.2.b.iii

(1) Acceptable;

4.1.4.2.c.i

(1) Acceptable;

4.1.4.2.c.ii

(1) Acceptable;

4.1.4.2.c.iii

(1) Acceptable;

4.1.4.2.c.iv

(1) Acceptable;

4.1.4.2.d.i

(1) Acceptable;

4.1.4.2.d.ii

(1) Acceptable;

4.1.4.2.d.iii

(1) Acceptable;

4.1.4.2.d.iv

(1) Acceptable;

4.1.4.3

The DRE system recording requirements address the detection and recording of votes, including the logic and data processing functions required to determine the validity of voter selections, to accept ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) not a dre;

4.1.4.3.a.i

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.a.ii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.b.i

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.b.ii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) not a dre;

4.1.4.3.b.iii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.b.iv

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.b.v

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.b.vi

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.c.i

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.c.ii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.c.iii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) not a DRE;

4.1.4.3.c.iv

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.c.v

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.c.vi

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.4.3.TS

Recording reliability refers to the ability of the DRE system to record votes accurately at its maximum rated processing volume for a specified period of time. The DRE system shall record votes reliab...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

4.1.5

The paper-based conversion requirements address the ability of the system to read the ballot card and to translate its pattern of marks into electronic signals for later processing. These capabilities...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.5.1

Ballot handling consists of a ballot cardâ€™s acceptance, movement through the read station, and transfer into a collection station or receptacle. a. The capacity to convert the marks on individual...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Tested in subsections;

4.1.5.1.a

(1) This requirement is not applicable to the current system.; (2) Acceptable;

4.1.5.1.b.i

Ballot handling consists of a ballot cardâ€™s acceptance, movement through the read station, and transfer into a collection station or receptacle. b. When ballots are unreadable or some condition i...

(1) Acceptable;

4.1.5.1.b.ii

(1) Acceptable;

4.1.5.1.b.iii

(1) Acceptable;

4.1.5.1.c

Ballot handling consists of a ballot cardâ€™s acceptance, movement through the read station, and transfer into a collection station or receptacle. c. Additionally, the system shall provide a capabi...

(1) Acceptable;

4.1.5.1.d.i

Ballot handling consists of a ballot cardâ€™s acceptance, movement through the read station, and transfer into a collection station or receptacle. d. When ballots are unreadable or when some condit...

(1) Acceptable;

4.1.5.1.d.ii

Ballot handling consists of a ballot cards acceptance, movement through the read station, and transfer into a collection station or receptacle. d. When ballots are unreadable or when some condition...

(1) Acceptable;

4.1.5.1.d.iii

(1) Acceptable;

4.1.5.1.d.iv

(1) Acceptable;

4.1.5.1.e.i

Ballot handling consists of a ballot cardâ€™s acceptance, movement through the read station, and transfer into a collection station or receptacle. e. Ballot readers shall prevent multiple feed or d...

(1) Acceptable;

4.1.5.1.e.ii

(1) Acceptable;

4.1.5.2

This paper-based system requirement governs the conversion of the physical ballot into electronic data. Reading accuracy for ballot conversion refers to the ability to: a. Recognize vote punches or...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.5.2.a

(1) Acceptable;

4.1.5.2.b

This paper-based system requirement governs the conversion of the physical ballot into electronic data. Reading accuracy for ballot conversion refers to the ability to: b. Discriminate between vali...

(1) Acceptable;

4.1.5.2.c

This paper-based system requirement governs the conversion of the physical ballot into electronic data. Reading accuracy for ballot conversion refers to the ability to: c. Convert the vote punches ...

(1) Acceptable;

4.1.5.2.d

This paper-based system requirement governs the conversion of the physical ballot into electronic data. Reading accuracy for ballot conversion refers to the ability to: To ensure accuracy, paper-ba...

(1) Acceptable;

4.1.5.2.e

(1) Acceptable;

4.1.5.2.f

(1) Acceptable;

4.1.6

Tabulation processing requirements apply to the hardware and software required to accumulate voting data for all candidates and measures within voting machines and polling places, and to consolidate t...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.6.1

The paper-based processing requirements address all mechanical devices, electromechanical devices, electronic devices, and software required to perform the logical and numerical functions of interpret...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) testedin subsections;

4.1.6.1.a.i

(1) Acceptable;

4.1.6.1.a.ii

(1) Acceptable;

4.1.6.1.a.iii

(1) Acceptable;

4.1.6.1.a.iv

(1) Acceptable;

4.1.6.1.b

(1) Acceptable;

4.1.6.2

The DRE voting systems processing requirements address all mechanical devices, electromechanical devices, electronic devices, and software required to process voting data after the polls are closed. ...

(1) This requirement is not applicable to the current system.; (2) tested in subsections; (3) Acceptable;

4.1.6.2.a.i

(1) This requirement is not applicable to the current system.; (2) not a DRE; (3) Acceptable;

4.1.6.2.a.ii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.6.2.b.i

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.6.2.b.ii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.6.2.c

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not a DRE;

4.1.7

The reporting requirements govern all mechanical, electromechanical, and electronic devices required for voting systems to print audit record entries and results of the tabulation. These requirements ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.7.1

In voting systems that use storage media that can be removed from the system and transported to another location for readout and report generation, these media shall use devices with demonstrated erro...

(1) Acceptable;

4.1.7.2

All printers used to produce reports of the vote count shall be capable of producing: a. Alphanumeric headers b. Election, office and issue labels c. Alphanumeric entries generated as part of...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.1.7.2.a

All printers used to produce reports of the vote count shall be capable of producing: a. Alphanumeric headers...

(1) Acceptable;

4.1.7.2.b

All printers used to produce reports of the vote count shall be capable of producing: b. Election, office and issue labels...

(1) Acceptable;

4.1.7.2.c

All printers used to produce reports of the vote count shall be capable of producing: c. Alphanumeric entries generated as part of the audit record...

(1) Acceptable;

4.1.8

The vote data management requirements for all systems address capabilities that manage, process, and report voting data after the data has been consolidated at the polling place or other jurisdictiona...

(1) Acceptable; (2) tested in subsections;

4.1.8.1

All voting systems shall provide the capability to: a. Integrate voting data files with ballot definition files b. Verify file compatibility c. Edit and update files as required...

(1) This requirement is not applicable to the current system.; (2) Lab action; (3) Should be applicable?; (4) Acceptable; (5) tested in subsections;

4.1.8.1.a

All voting systems shall provide the capability to: a. Integrate voting data files with ballot definition files...

(1) Acceptable; (2) Tested in subsections;

4.1.8.1.b

All voting systems shall provide the capability to: b. Verify file compatibility...

(1) Acceptable;

4.1.8.1.c

All voting systems shall provide the capability to: c. Edit and update files as required...

(1) Acceptable;

4.1.8.2

All voting systems shall include report generators for producing output reports at the device, polling place, and summary level, with provisions for administrative and judicial subdivisions as require...

(1) Acceptable;

4.2

This subsection covers physical characteristics of all voting systems and components that affect their general utility and suitability for election operations....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.2.1

There is no numerical limitation on the size of any voting equipment, but the size of each voting machine should be compatible with its intended use and the location at which the equipment is to be us...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not testable;

4.2.2

There is no numerical limitation on the weight of any voting equipment, but the weight of each voting machine should be compatible with its intended use and the location at which the equipment is to b...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not testable;

4.2.3

All precinct voting systems shall: a. Provide a means to safely and easily handle, transport, and install voting equipment, such as wheels or a handle or handles b. Be capable of using, or be pr...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Tested in subsections;

4.2.3.a

All precinct voting systems shall: a. Provide a means to safely and easily handle, transport, and install voting equipment, such as wheels or a handle or handle...

(1) Acceptable;

4.2.3.b.i

All precinct voting systems shall: b. Be capable of using, or be provided with, a protective enclosure rendering the equipment capable of withstanding: i. Impact, shock and vibration loads assoc...

(1) Acceptable;

4.2.3.b.ii

All precinct voting systems shall: b. Be capable of using, or be provided with, a protective enclosure rendering the equipment capable of withstanding: ii. Stacking loads associated with storage...

(1) Acceptable;

4.3

This subsection covers voting system materials, construction workmanship, and specific design characteristics important to the successful operation and efficient maintenence of the voting system. ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.3.1

The approach to system design is unrestricted, and may incorporate any form or variant of technology capable of meeting the voting systems requirements and standards. Precinct count systems shall be ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.3.1.a

(1) Acceptable;

4.3.1.b

(1) Acceptable;

4.3.1.c

(1) Acceptable;

4.3.2

All voting systems shall be designed to withstand normal use without deterioration and without excessive maintenance cost for a period of ten years....

(1) Acceptable;

4.3.3

The reliability of voting system devices shall be measured as Mean Time Between Failure (MTBF) for the system submitted for testing. MBTF is defined as the value of the ratio of operating time to the ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.3.4

Maintainability represents the ease with which maintenance actions can be performed based on the design characteristics of equipment and software and the processes the vendor and election officials ha...

(1) Acceptable;

4.3.4.1

The following physical attributes will be examined to assess reliability: a. Presence of labels and the identification of test points b. Provision of built-in test and diagnostic circuitry or ph...

(1) Acceptable;

4.3.4.1.a

The following physical attributes will be examined to assess reliability: a. Presence of labels and the identification of test points...

(1) Acceptable;

4.3.4.1.b

The following physical attributes will be examined to assess reliability: b. Provision of built-in test and diagnostic circuitry or physical indicators of condition...

(1) Acceptable;

4.3.4.1.c

The following physical attributes will be examined to assess reliability: c. Presence of labels and alarms related to failures...

(1) Acceptable;

4.3.4.1.d

The following physical attributes will be examined to assess reliability: d. Presence of features that allow non-technicians to perform routine maintenance tasks (such as update of the system datab...

(1) Acceptable;

4.3.4.2

The following additional attributes will be considered to assess system maintainability: a. Ease of detecting that equipment has failed by a non-technician b. Ease of diagnosing problems by a tr...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.3.4.2.a

The following additional attributes will be considered to assess system maintainability: a. Ease of detecting that equipment has failed by a non-technician...

(1) Acceptable;

4.3.4.2.b

The following additional attributes will be considered to assess system maintainability: b. Ease of diagnosing problems by a trained technician...

(1) Acceptable;

4.3.4.2.c

The following additional attributes will be considered to assess system maintainability: c. Low false alarm rates (i.e., indications of problems that do not exist)...

(1) Acceptable;

4.3.4.2.d

The following additional attributes will be considered to assess system maintainability: d. Ease of access to components for replacement...

(1) Acceptable;

4.3.4.2.e

The following additional attributes will be considered to assess system maintainability: e. Ease with which adjustment and alignment can be performed...

(1) Acceptable;

4.3.4.2.f

The following additional attributes will be considered to assess system maintainability: f. Ease with which database updates can be performed by a non-technician...

(1) Acceptable;

4.3.4.2.g

The following additional attributes will be considered to assess system maintainability: g. Adjust, align, tune or service components...

(1) Acceptable;

4.3.5

The availability of a voting system is defined as the probability that the equipment (and supporting software) needed to perform designated voting functions will respond to operational commands and ac...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.3.5.a.i

(1) Acceptable;

4.3.5.a.ii

(1) Acceptable;

4.3.5.b

(1) Acceptable;

4.3.5.c

(1) Acceptable;

4.3.5.d

(1) Acceptable;

4.3.5.e

(1) Acceptable;

4.3.5.f

(1) Acceptable;

4.3.5.g

(1) Acceptable;

4.3.6

All voting systems shall: a. Identify all devices by means of a permanently affixed nameplate or label containing the name of the manufacturer or vendor, the name of the device, its part or model n...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.3.6.a

(1) Acceptable;

4.3.6.b

All voting systems shall: b. Display on each device a separate data plate containing a schedule for and list of operations required to service or to perform preventive maintenance ...

(1) Acceptable;

4.3.6.c

All voting systems shall: c. Display advisory caution and warning instructions to ensure safe operation of the equipment and to avoid exposure to hazardous electrical voltages and moving parts at a...

(1) Acceptable;

4.3.7

To help ensure proper workmanship, all manufacturers of voting systems shall: a. Adopt and adhere to practices and procedures to ensure that their products are free from damage or defect that could...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) ested in subsections;

4.3.7.a

(1) Acceptable;

4.3.7.b

To help ensure proper workmanship, all manufacturers of voting systems shall: b. Ensure that components provided by external suppliers are free from damage or defect that could make them unsatisfac...

(1) Acceptable;

4.3.8

All voting systems shall meet the following requirements for safety: a. All voting systems and their components shall be designed to eliminate hazards to personnel or to the equipment itself b. ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

4.3.8.a

All voting systems shall meet the following requirements for safety: a. All voting systems and their components shall be designed to eliminate hazards to personnel or to the equipment itself...

(1) Acceptable;

4.3.8.b

All voting systems shall meet the following requirements for safety: b. Defects in design and construction that can result in personal injury or equipment damage must be detected and corrected befo...

(1) Acceptable;

4.3.8.c

All voting systems shall meet the following requirements for safety: c. Equipment design for personnel safety shall be equal to or better than the appropriate requirements of the Occupational Safet...

(1) Acceptable;

1.7.1.1

(1) Acceptable;

4.2.2

The hardware submitted for national certification testing shall be equivalent, in form and function, to the actual production versions of the hardware units. Engineering or developmental prototypes ar...

(1) Acceptable;

4.2.1

(1) Acceptable;

4.3

(1) Acceptable;

4.4

The accredited test lab shall maintain a test log of the procedure employed. This log shall identify the system and equipment by model and serial number. Test environment conditions shall be noted. ...

(1) Acceptable;

4.5

The use of test fixtures or ancillary devices to facilitate hardware testing is encouraged. These fixtures and devices may include arrangements for automating the operation of voting devices and the ...

(1) Acceptable;

4.6.1

Environmental tests of non-operating equipment are intended to simulate exposure to physical shock and vibration associated with handling and transportation of voting equipment and precinct counters b...

(1) Acceptable;

4.6.2

The bench handling test simulates stresses faced during maintenance and repair of voting machines and ballot counters....

(1) Acceptable;

4.6.3

The vibration test simulates stresses faced during transport of voting machines and ballot counters between storage locations and polling places....

(1) Acceptable;

4.6.4

The low temperature test simulates stresses faced during storage of voting machines and ballot counters....

(1) Acceptable;

4.6.5

The high temperature test simulates stresses faced during storage of voting machines and ballot counters....

(1) Acceptable;

4.6.6

The humidity test simulates stresses faced during storage of voting machines and ballot counters....

(1) Acceptable;

4.7.1

(1) Acceptable;

4.7.1.1

(1) Acceptable;

4.7.2

(1) Acceptable;

4.7.3

The accredited test lab shall test for reliability based on the provisions of Volume I, Section 4for the acceptable Mean Time Between Failure (MBTF). The MBTF shall be measured during the conduct of o...

(1) Acceptable;

4.7.4

(1) Acceptable;

4.8

(1) Acceptable;

C.4

The equivalence between a number of events and a time period can be established when the operating scenarios of a system can be determined with precision. Some of the performance test criteria of Volu...

(1) Acceptable;

1. Lab 2. Functional 3. Usability 4. Hardware 5. Software 6. Telecomm 7. Security 8. QA 9. CM

Software Requirements

Vol

Citation

Text (click to see full text)

Status

Comments

5.1

This section describes essential design and performance characteristics of the software used in voting systems, addressing both system level software, such as operating systems, and voting system appl...

(1) This requirement is not applicable to the current system.;

5.1.1

The requirements of this section apply generally to all software used in voting systems, including: â€¢ Software provided by the voting system vendor and its component suppliers â€¢ Software fur...

(1) Acceptable;

5.1.1.TS 2

Configuration of software, both operating systems and applications, is critical to proper system functioning. Correct test design and sufficient test execution must account for the intended and proper...

(1) Acceptable;

5.1.2

The requirements of this section apply to all software used in any manner to support any voting-related activities, regardless of the ownership of the software or the ownership and location of the har...

(1) Acceptable;

5.1.3

Some voting systems use computers that also may be used for other purposes. General purpose software such as operating systems, programming language compilers, database management systems, and Web bro...

(1) This requirement is not applicable to the current system.;

5.1.3.a

(1) Acceptable;

5.1.3.b

(1) Acceptable;

5.1.3.c

(1) Acceptable;

5.2

The software used by voting systems is selected by the vendor and not prescribed by the Guidelines. This section provides requirements for voting system software with regard to: â€¢ Selection of pr...

(1) This requirement is not applicable to the current system.;

5.2.1

Software associated with the logical and numerical operations of vote data shall use a highlevel programming language, such as: Pascal, Visual Basic, Java, C and C++. The requirement for the use of hi...

(1) Acceptable;

5.2.2

Self-modifying, dynamically loaded or interpreted code is prohibited, except under the security provisions outlined in Subsection 7.4. This prohibition is to ensure that the software tested and approv...

(1) Acceptable;

5.2.2.a

(1) Acceptable;

5.2.2.b

(1) Acceptable;

5.2.2.c

(1) Acceptable;

5.2.3

Voting system application software, including commercial off-the-shelf (COTS) software, shall be designed in a modular fashion. However, COTS software is not required to be inspected for compliance wi...

(1) This requirement is not applicable to the current system.;

5.2.3.a

(1) Acceptable;

5.2.3.b

(1) Acceptable;

5.2.3.c

(1) Acceptable;

5.2.3.d

(1) Acceptable;

5.2.3.e

(1) Acceptable;

5.2.3.f

(1) Acceptable;

5.2.4

Voting system software shall use the control constructs identified in Volume II, Section 5: a. Acceptable constructs are Sequence, If-Then-Else, Do-While, Do-Until, Case, and the General Loop (incl...

(1) This requirement is not applicable to the current system.;

5.2.4.a.i

(1) Acceptable;

5.2.4.a.ii

(1) Acceptable;

5.2.4.a.iii

(1) Acceptable;

5.2.5

Voting system software shall use the naming conventions below. a. Object, function, procedure, and variable names shall be chosen to enhance the readability and intelligibility of the program. Inso...

(1) This requirement is not applicable to the current system.;

5.2.5.a

(1) Acceptable;

5.2.5.b

Voting system software shall use the naming conventions below. b. Names used in code and in documentation shall be consistent....

(1) Acceptable;

5.2.5.c

Voting system software shall use the naming conventions below. c. Names shall be unique within an application. Names shall differ by more than a single character. All single-character names are for...

(1) Acceptable;

5.2.5.d

Voting system software shall use the naming conventions below. d. Language keywords shall not be used as names of objects, functions, procedures, variables or in any manner not consistent with the ...

(1) Acceptable;

5.2.6

Voting system software shall adhere to basic coding conventions. The coding conventions used shall meet one of the following conditions: a. The vendors shall identify the published, reviewed, and i...

(1) This requirement is not applicable to the current system.;

5.2.6.a

(1) Acceptable;

5.2.6.b

Voting system software shall adhere to basic coding conventions. The coding conventions used shall meet one of the following conditions: b. The accredited test lab shall evaluate the code using the...

(1) Acceptable;

5.2.7

Voting system software shall use the following comment conventions: a. All modules shall contain headers. For small modules of 10 lines or less, the header may be limited to identification of unit ...

(1) This requirement is not applicable to the current system.;

5.2.7.a.i

(1) Acceptable;

5.2.7.a.ii

(1) Acceptable;

5.2.7.a.iii

(1) Acceptable;

5.2.7.a.iv

(1) Acceptable;

5.2.7.a.v

(1) Acceptable;

5.2.7.a.vi

(1) Acceptable;

5.2.7.b

Voting system software shall use the following comment conventions: b. Descriptive comments shall be provided to identify objects and data types. All variables shall have comments at the point of d...

(1) Acceptable;

5.2.7.c

Voting system software shall use the following comment conventions: c. In-line comments shall be provided to facilitate interpretation of functional operations, tests, and branching...

(1) Acceptable;

5.2.7.d

Voting system software shall use the following comment conventions: d. Assembly code shall contain descriptive and informative comments such that its executable lines can be clearly understood...

(1) Acceptable;

5.2.7.e

Voting system software shall use the following comment conventions: e. All comments shall be formatted in a uniform manner that makes it easy to distinguish them from executable code...

(1) Acceptable;

5.3

All systems shall: a. Maintain the integrity of voting and audit data during an election, and for at least 22 months thereafter, a time sufficient to resolve most contested elections and support ot...

(1) This requirement is not applicable to the current system.;

5.3.a

(1) Acceptable;

5.3.b

All systems shall: b. Protect against the failure of any data input or storage device at a location controlled by the jurisdiction or its contractors, and against any attempt at improper data entry...

(1) Lab action; (2) Shouldn't there be a security doc citation?; (3) ; (4) Updated; (5) Acceptable;

5.4

Audit trails are essential to ensure the integrity of a voting system. Operational requirements for audit trails are described in Subsection 2.5.1.1. Audit record data are generated by these procedure...

(1) Acceptable;

5.4.1

During election definition and ballot preparation, the system shall audit the preparation of the baseline ballot formats and modifications to them, a description of these modifications, and correspond...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

5.4.1.a

(1) Acceptable;

5.4.1.b

(1) Acceptable;

5.4.1.c

(1) Acceptable;

5.4.1.d

(1) Acceptable;

5.4.1.e

(1) Acceptable;

5.4.1.f

(1) Acceptable;

5.4.1.g

(1) Acceptable;

5.4.2

The following minimum requirements apply to system readiness audit records: a. Prior to the start of ballot counting, a system process shall verify hardware and software status and generate a readi...

(1) This requirement is not applicable to the current system.;

5.4.2.a

(1) Acceptable;

5.4.2.b

The following minimum requirements apply to system readiness audit records: b. In the case of systems used at the polling place, the record shall include polling place identification...

(1) Acceptable;

5.4.2.c

The following minimum requirements apply to system readiness audit records: c. The ballot interpretation logic shall test and record the correct installation of ballot formats on voting devices...

(1) Acceptable;

5.4.2.d

The following minimum requirements apply to system readiness audit records: d. The software shall check and record the status of all data paths and memory locations to be used in vote recording to ...

(1) Acceptable;

5.4.2.e

The following minimum requirements apply to system readiness audit records: e. Upon the conclusion of the tests, the software shall provide evidence in the audit record that the test data have been...

(1) Acceptable;

5.4.2.f

The following minimum requirements apply to system readiness audit records: f. If required and provided, the ballot reader and arithmetic-logic unit shall be evaluated for accuracy, and the system ...

(1) Acceptable;

5.4.2.g.i

The following minimum requirements apply to system readiness audit records: g. For systems that use a public network, provide a report of test ballots that includes: i. Number of ballots sent ...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

5.4.2.g.ii

The following minimum requirements apply to system readiness audit records: g. For systems that use a public network, provide a report of test ballots that includes: ii. When each ballot was sen...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

5.4.2.g.iii

The following minimum requirements apply to system readiness audit records: g. For systems that use a public network, provide a report of test ballots that includes: iii. Machine from which each...

(1) This requirement is not applicable to the current system.;

5.4.2.g.iv

The following minimum requirements apply to system readiness audit records: g. For systems that use a public network, provide a report of test ballots that includes: iv. Specific votes or select...

(1) This requirement is not applicable to the current system.;

5.4.3

In-process audit records document system operations during diagnostic routines and the casting and tallying of ballots. At a minimum, the in-process audit records shall contain: a. Machine generate...

(1) This requirement is not applicable to the current system.;

5.4.3.a.i

(1) Acceptable;

5.4.3.a.ii

(1) Lab action; (2) Do not see in test cases where exceptions would be created to view/confirm correctness of audit records.; (3) ; (4) Updated; (5) Acceptable;

5.4.3.a.iii

(1) Lab action; (2) same as 5.4.2.a.ii; (3) ; (4) Updated; (5) Acceptable;

5.4.3.a.iv

(1) Acceptable;

5.4.3.a.v

(1) Lab action; (2) same as 5.4.3.a.ii; (3) ; (4) Updated; (5) Acceptable;

5.4.3.b.i

(1) Acceptable;

5.4.3.b.ii

(1) Acceptable;

5.4.3.b.iii

(1) Acceptable;

5.4.3.b.iv

(1) This requirement is not applicable to the current system.;

5.4.3.c

(1) Acceptable;

5.4.3.d

(1) Acceptable;

5.4.4

In addition to the audit requirements described above, other election-related data is essential for reporting results to interested parties, the press, and the voting public, and is vital to verifying...

(1) This requirement is not applicable to the current system.;

5.4.4.a

(1) Acceptable;

5.4.4.b

(1) Acceptable;

5.4.4.c

(1) Acceptable;

5.4.4.d

(1) Acceptable;

5.4.4.e

(1) Acceptable;

5.4.4.ts

(1) Acceptable;

5.5

All DRE systems shall ensure vote secrecy by: a. Immediately after the voter chooses to cast his or her ballot, record the voterâ€™s selections in the memory to be used for vote counting and audit ...

(1) This requirement is not applicable to the current system.;

5.5.a

(1) This requirement is not applicable to the current system.;

5.5.b

All DRE systems shall ensure vote secrecy by: b. Immediately after the voter chooses to cancel his or her ballot, erase the selections from the display and all other storage, including buffers and ...

(1) This requirement is not applicable to the current system.;

1.3.1.3

The software tests encompass a number of interrelated examinations, involving assessment of application source code for its compliance with the requirements spelled out in Volume I, Section 5. Essenti...

(1) Lab action; (2) Need citation.; (3) Acceptable;

1.7.1.2

(1) Lab action; (2) Need citation.; (3) Acceptable;

5.2

The accredited test lab shall design and perform procedures that test the voting system software requirements identified in Volume I, Section 5. All software components designed or modified for electi...

(1) Acceptable;

5.3

Prior to initiating the software review, the accredited test lab shall verify that the documentation submitted by the vendor in the TDP is sufficient to enable: a. Review of the source code b. D...

(1) Acceptable;

5.4

The accredited test lab shall compare the source code to the vendor's software design documentation to ascertain how completely the software conforms to the vendorâ€™s specifications. Source code insp...

(1) Acceptable;

5.4.1

Voting system software shall use the control constructs identified in this section as follows: a. If the programming language used does not provide these control constructs, the vendor shall provid...

(1) Acceptable;

5.4.1.a

(1) Acceptable;

5.4.1.b

Voting system software shall use the control constructs identified in this section as follows: b. While some programming languages do not create programs as linear processes, stepping from an initi...

(1) Acceptable;

5.4.1.c

Voting system software shall use the control constructs identified in this section as follows: c. Operator intervention or logic that evaluates received or stored data shall not re-direct program c...

(1) Acceptable;

5.4.1.d

Voting system software shall use the control constructs identified in this section as follows: d. Conventional constructs that are inherent to the development language are permitted but must be doc...

(1) Acceptable;

5.4.2

(1) Acceptable;

1. Lab 2. Functional 3. Usability 4. Hardware 5. Software 6. Telecomm 7. Security 8. QA 9. CM

Telecomm Requirements

Vol

Citation

Text (click to see full text)

Status

Comments

2.1.9

For all voting systems that use telecommunications for the transmission of data during prevoting, voting or post-voting activities, capabilities shall be provided that ensure data are transmitted with...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

4.1.2.15

Voting systems may use a local or remote data network. If such a network is used, then all components of the network shall comply with the telecommunications requirements described in Section 6 and th...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.1

This section contains the performance, design, and maintenance characteristics of the telecommunications components of voting systems and the acceptable levels of performance against these characteris...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.1.1

This section addresses telecommunications hardware and software across a broad range of technologies including, but not limited to: â€¢ Dial-up communications technologies including standard landli...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.1.2

This section applies to voting-related transmissions over public networks, such as those provided by local distribution and long distance carriers. This section also applies to private networks regard...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.1.3

These requirements apply to the use of telecommunications to transmit data for the preparation of the system for an election, the execution of an election, and the preservation of the system data and ...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.2

Design, construction, and maintenance requirements for telecommunications represent the operational capability of both system hardware and software. These capabilities shall be considered basic to all...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.2.1

The telecommunications components of all voting systems shall meet the accuracy requirements of Subsection 4.1.1....

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.2.2

The telecommunications components of all voting systems shall meet the durability requirements of Subsection 4.3.2....

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.2.3

The telecommunications components of all voting systems shall meet the reliability requirements of Subsection 4.3.3....

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.2.4

The telecommunications components of all voting systems shall meet the maintainability requirements of Subsection 4.3.4....

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.2.5

The telecommunications components of all voting systems shall meet the availability requirements of Subsection 4.3.5....

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.2.6

For WANs using public telecommunications, boundary definition and implementation shall meet the requirements below. a. Outside service providers and subscribers of such providers shall not be given...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.2.6.a

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.2.6.b

For WANs using public telecommunications, boundary definition and implementation shall meet the requirements below. b. Voting system administrators shall not require any type of control of resource...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.2.6.c

For WANs using public telecommunications, boundary definition and implementation shall meet the requirements below. c. The system shall be designed and configured such that it is not vulnerable to ...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.2.7

Confirmation occurs when the system notifies the user of the successful or unsuccessful completion of the data transmission, where successful completion is defined as accurate receipt of the transmitt...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

6.4.2

(1) This requirement is not applicable to the current system.; (2) Acceptable;

1. Lab 2. Functional 3. Usability 4. Hardware 5. Software 6. Telecomm 7. Security 8. QA 9. CM

Security Requirements

Vol

Citation

Text (click to see full text)

Status

Comments

2.1.1

System security is achieved through a combination of technical capabilities and sound administrative practices. To ensure security, all systems shall: a. Provide security access controls that limit...

(1) Acceptable;

2.1.1.a

(1) Acceptable;

2.1.1.b

System security is achieved through a combination of technical capabilities and sound administrative practices. To ensure security, all systems shall: b. Provide system functions that are executabl...

(1) Acceptable;

2.1.1.c

System security is achieved through a combination of technical capabilities and sound administrative practices. To ensure security, all systems shall: c. Use the system's control logic to prevent a...

(1) Acceptable;

2.1.1.d

System security is achieved through a combination of technical capabilities and sound administrative practices. To ensure security, all systems shall: d. Provide safeguards in response to system fa...

(1) Acceptable;

2.1.1.e

System security is achieved through a combination of technical capabilities and sound administrative practices. To ensure security, all systems shall: e. Provide security provisions that are compat...

(1) Acceptable;

2.1.1.f

System security is achieved through a combination of technical capabilities and sound administrative practices. To ensure security, all systems shall: f. Incorporate a means of implementing a capab...

(1) Acceptable;

2.1.1.g

System security is achieved through a combination of technical capabilities and sound administrative practices. To ensure security, all systems shall: g. Provide documentation of mandatory administ...

(1) Acceptable;

7.1

This section describes essential security capabilities for a voting system, encompassing the systemâ€™s hardware, software, communications and documentation. No predefined set of security standards wi...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

7.1.1

The requirements of this section apply to the capabilities of a voting system that must be provided by the vendor. However, an effective security program requires well-defined security practices by ...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

7.1.2

The guidelines presented in this section are organized as follows: Access Control: These standards address procedures and system capabilities that limit or detect access to critical system componen...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

7.2

Access controls are procedures and system capabilities that detect or limit access to system components in order to guard against loss of system integrity, availability, confidentiality, and accountab...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

7.2.1

The vendor shall specify the general features and capabilities of the access control policy recommended to provide effective voting system security. Although the jurisdiction in which the voting sy...

(1) This requirement is not applicable to the current system.; (2) Applicable Requirement; (3) This should be applicable as a documentation requirement; (4) Lab action; (5) Acceptable; (6) Requirements covered in sub sections.;

7.2.1.a

(1) Acceptable; (2) No Wireless Communication;

7.2.1.b

(1) Acceptable;

7.2.1.c

(1) Acceptable;

7.2.1.d

(1) Acceptable;

7.2.1.e

(1) Acceptable;

7.2.1.f

(1) Acceptable;

7.2.1.g

(1) Acceptable;

7.2.1.h

(1) Acceptable;

7.2.1.1

Voting system vendors shall: a. Identify each person to whom access is granted, and the specific functions and data to which each person holds authorized access b. Specify whether an individualâ€™...

(1) This requirement is not applicable to the current system.; (2) Lab action; (3) this requirement should be applicable; (4) Acceptable; (5) requirement covered in subsections;

7.2.1.1.a

Voting system vendors shall: a. Identify each person to whom access is granted, and the specific functions and data to which each person holds authorized access ...

(1) Acceptable;

7.2.1.1.b

Voting system vendors shall: b. Specify whether an individualâ€™s authorization is limited to a specific time, time interval or phase of the voting or counting operations ...

(1) Acceptable;

7.2.1.1.c

Voting system vendors shall: c. Permit the voter to cast a ballot expeditiously, but preclude voter access to all aspects of the vote counting processes ...

(1) Acceptable;

7.2.1.2

Vendors shall provide a detailed description of all system access control measures designed to permit authorized access to the system and prevent unauthorized access. Examples of such measures inclu...

(1) This requirement is not applicable to the current system.; (2) Lab action; (3) this should be applicable in the documentation; (4) Acceptable; (5) Requirements covered in subsections;

7.2.1.2.a

(1) Acceptable;

7.2.1.2.b

(1) Acceptable;

7.2.1.2.c

(1) Acceptable;

7.2.1.2.d

(1) Acceptable;

7.2.1.2.e

(1) Acceptable;

7.2.1.2.f

(1) Acceptable;

7.2.1.2.g

(1) Acceptable;

7.2.1.2.h

(1) Acceptable;

7.2.1.2.ts

(1) Acceptable;

7.3

A voting systemâ€™s sensitivity to disruption or corruption of data depends, in part, on the physical location of equipment and data media, and on the establishment of secure telecommunications among ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) agree N/A;

7.3.1

For polling place operations, vendors shall develop and provide detailed documentation of measures to enable poll workers to physically protect and perform orderly shutdown of voting equipment to coun...

(1) This requirement is not applicable to the current system.; (2) Applicable Requirement; (3) Acceptable;

7.3.2

Vendors shall develop and document in detail the measures to be taken in a central counting environment. These measures shall include physical and procedural controls related to the handling of ballot...

(1) Acceptable;

7.4

Voting systems shall meet specific security requirements for the installation of software and for protection against malicious software. ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Agree N/A;

7.4.1

The system shall meet the following requirements for installation of software, including hardware with embedded firmware. a. If software is resident in the system as firmware, the vendor shall req...

(1) This requirement is not applicable to the current system.; (2) Lab action; (3) The software must be able to be loaded, should be applicable; (4) Acceptable; (5) Requirmeents covered in subsections;

7.4.1.a

The system shall meet the following requirements for installation of software, including hardware with embedded firmware. a. If software is resident in the system as firmware, the vendor shall requ...

(1) Acceptable;

7.4.1.b

The system shall meet the following requirements for installation of software, including hardware with embedded firmware. b. To prevent alteration of executable code, no software shall be permanent...

(1) Acceptable;

7.4.1.c

The system shall meet the following requirements for installation of software, including hardware with embedded firmware. c. The voting system bootstrap, monitor, and device-controller software may...

(1) Acceptable;

7.4.1.d

The system shall meet the following requirements for installation of software, including hardware with embedded firmware. d. The election-specific programming may be installed and resident as firmw...

(1) Acceptable;

7.4.1.e

The system shall meet the following requirements for installation of software, including hardware with embedded firmware. e. After initiation of election day testing, no source code or compilers or...

(1) Acceptable;

7.4.2

Voting systems shall deploy protection against the many forms of threats to which they may be exposed such as file and macro viruses, worms, Trojan horses, and logic bombs. Vendors shall develop and d...

(1) Acceptable;

7.4.3

Subsections 7.4.4, 7.4.5 and 7.4.6 specify requirements for the distribution of voting system software and the setup validation performed on voting system equipment. These requirements are applicable ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Agree this is not testable.;

7.4.4

a. The vendor shall document all software including voting system software, third party software (such as operating systems and drivers) to be installed on the certified voting system, and installat...

(1) Acceptable;

7.4.4.a.i

(1) Acceptable;

7.4.4.a.ii

(1) Acceptable;

7.4.4.b.i

b. The EAC accredited testing lab shall witness the final build of the executable version of the certified voting system software performed by the vendor. i. The testing lab shall create a complete...

(1) Acceptable;

7.4.4.b.ii

b. The EAC accredited testing lab shall witness the final build of the executable version of the certified voting system software performed by the vendor. ii. The record of the source code and exec...

(1) Acceptable;

7.4.4.b.iii

b. The EAC accredited testing lab shall witness the final build of the executable version of the certified voting system software performed by the vendor. iii. The testing lab shall retain this rec...

(1) Acceptable;

7.4.4.c.iii

c. After EAC certification has been granted, the testing lab shall create a subset of the complete record of the build that includes a unique identifier (such as a serial number) of the subset, the un...

(1) Acceptable;

7.4.4.c.iv

c. After EAC certification has been granted, the testing lab shall create a subset of thecomplete record of the build that includes a unique identifier (such as a serial number)of the subset, the uniq...

(1) Acceptable;

7.4.4.c.v

(1) Acceptable;

7.4.4.d.i

d. The vendor shall provide the NSRL and any repository designated by a state with a copy of the software installation disk, which the vendor will distribute to purchasers-- including the executable b...

(1) Acceptable;

7.4.4.d.ii

(1) Acceptable;

7.4.4.e

e. The voting system equipment shall be designed to allow the voting system administrator to verify that the software is the certified software by comparing it to reference information produced by the...

(1) Acceptable;

7.4.4.f

f. The vendors and testing labs shall document to whom they provide voting system software....

(1) Acceptable;

7.4.5

The NSRL or other repository designated by a state election office shall generate reference information using the binary images of the (a) certified voting system software received onunalterable stora...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Agree not testable via the VSTL;

7.4.5.a

(1) Lab action; (2) THis is a NSRL task how can the lab do this?; (3) ; (4) Updated; (5) Acceptable;

7.4.5.b

The NSRL or other repository designated by a state election office shall generate reference information using the binary images of the (a)certified voting system software received on unalterable stora...

(1) Lab action; (2) This is a NSRL action How did the lab do this?; (3) ; (4) Updated; (5) Acceptable;

7.4.5.c

(1) Lab action; (2) This a NRSL activity, How did the lab do this?; (3) ; (4) Updated; (5) Acceptable;

7.4.5.1

a. The NSRL or other designated repository that generates hash value and/or digital signature reference information shall use FIPS-approved algorithms for hashing and signing. i. The NSRL or othe...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Agree on VSTL testable; (4) Not VSTL tested;

7.4.5.1.a.i

a. The NSRL or other designated repository that generates hash value and/or digital signature reference information shall use FIPS-approved algorithms for hashing and signing. i. The NSRL or othe...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not VSTL testable;

7.4.5.1.a.ii

a. The NSRL or other designated repository that generates hash value and/or digital signature reference information shall use FIPS-approved algorithms for hashing and signing. ii. The NSRL or oth...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not VSTL testable;

7.4.5.1.b.i

b. If the NSRL or other designated repository uses public key technology, the following requirements shall be met: i. Public and private key pairs used by the repository to generate digital signat...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not VSTL testable;

7.4.5.1.b.ii

b. If the NSRL or other designated repository uses public key technology, the following requirements shall be met: ii. The repositoryâ€™s private keys used to generate digital signature reference ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not VSTL testable;

7.4.5.1.b.iii

b. If the NSRL or other designated repository uses public key technology, the following requirements shall be met: iii. Public keys used to verify digital signature reference information shall be ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not VSTL testable;

7.4.5.1.b.iv

b. If the NSRL or other designated repository uses public key technology, the following requirements shall be met: iv. All copies of public key unalterable storage media made by the repository sha...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not VSTL testable;

7.4.5.1.b.v

b. If the NSRL or other designated repository uses public key technology, the following requirements shall be met: v. The NSRL or other designated repository shall document to whom they provide u...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not VSTL Testable;

7.4.5.1.b.vi

b. If the NSRL or other designated repository uses public key technology, the following requirements shall be met: vi. When a private key used to generate digital signature reference information ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not VSTL Testable;

7.4.5.1.c

c. The NSRL or other designated repository shall make both the reference information available on unalterable storage media and its associated documentation that is labeled by the repository that cr...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Not VSTL Testable;

7.4.6

a. Setup validation methods shall verify that no unauthorized software is present on the voting equipment. b. The vendor shall have a process to verify that the correct software is loaded, that the...

(1) Acceptable; (2) Verification tool not formally evaluated by the VSTL.; (3) ; (4) This was evaluated at Wyle on both the ICE and ICP units; the requirements are marked as met within the security TCPS document;; (5) Acceptable;

7.4.6.a

a. Setup validation methods shall verify that no unauthorized software is present on the voting equipment. ...

(1) Acceptable; (2) Not Found; (3) I could find this in the references that supported this series of requirements; (4) ; (5) Is this acceptable or further information needed?; (6) Acceptable;

7.4.6.b.i

b. The vendor shall have a process to verify that the correct software is loaded, that there is no unauthorized software, and that voting system software on voting equipment has not been modified, usi...

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.4.6.b.ii

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.4.6.b.iii

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.4.6.c

c. The vendor shall provide a method to comprehensively list all software files that are installed on voting systems....

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Appendix A.8; (4) Acceptable;

7.4.6.d.i

d. The verification process should be able to be performed using COTS software and hardware available from sources other than the voting system vendor. i. If the process uses hashes or digital sign...

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.4.6.d.ii

d. The verification process should be able to be performed using COTS software and hardware available from sources other than the voting system vendor. ii. The verification process shall either (a)...

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.4.6.e.i

e. Voting system equipment shall provide a means to ensure that the system software can be verified through a trusted external interface, such as a read-only external interface, or by other means i...

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.4.6.e.ii

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.4.6.e.iii

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.4.6.e.iv

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.4.6.f.i

f. Setup validation methods shall verify that registers and variables of the voting system equipment contain the proper static and initial values. i. The vendor should provide a method to query the...

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.4.6.f.ii

f. Setup validation methods shall verify that registers and variables of the voting system equipment contain the proper static and initial values. ii. The vendor shall document the values of all st...

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and the System Security Specification TDP document; (4) Acceptable;

7.5

There are four areas that must be addressed by telecommunications and data transmission security capabilities: access control, data integrity, detection and prevention of data interception, and protec...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) These requirements covered in subsections;

7.5.1

Voting systems that use telecommunications to communicate between system components and locations are subject to the same security requirements governing access to any other system hardware, software,...

(1) This requirement is not applicable to the current system.; (2) Acceptable;

7.5.1.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Lab action; (4) Explain how communication between components happens and yet this is not applicable; (5) ; (6) The data between components is achieved via transferable media such as a CF card from the ICE unit back to RTR for vote tally; there is not direct telecommunication between the components; (7) Acceptable;

7.5.1.b.i

b. Voting systems that use telecommunications to communicate between system components and locations before the polling place is officially closed shall: i. Implement an encryption standard current...

(1) This requirement is not applicable to the current system.; (2) Not Found; (3) ; (4) This was N/A as it does not apply to the current system; (5) Acceptable;

7.5.1.b.ii

b. Voting systems that use telecommunications to communicate between system components and locations before the polling place is officially closed shall: ii. Provide a means to detect the presence ...

(1) This requirement is not applicable to the current system.; (2) Not Found; (3) ; (4) This was marked N/A as it does not apply to the current system; (5) Acceptable;

7.5.2

a. Voting systems that use public telecommunications networks shall implement protections against external threats to which commercial products used in the system may be susceptible. b. Voting syst...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Tested in subsections;

7.5.2.a

a. Voting systems that use public telecommunications networks shall implement protections against external threats to which commercial products used in the system may be susceptible....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.2.b.i

b. Voting systems that use public telecommunications networks shall provide system documentation that clearly identifies all COTS hardware and software products and communications services used in the...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.2.c.i

c. Voting systems that use public telecommunications networks shall use protective software at the receiving-end of all communications paths to: i. Detect the presence of a threat in a transmission...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.5.2.c.ii

c. Voting systems that use public telecommunications networks shall use protective software at the receiving-end of all communications paths to: ii. Remove the threat from infected files/data...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.2.c.iii

c. Voting systems that use public telecommunications networks shall use protective software at the receiving-end of all communications paths to: iii. Prevent against storage of the threat anywhere ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.2.c.iv

c. Voting systems that use public telecommunications networks shall use protective software at the receiving-end of all communications paths to: iv. Provide the capability to confirm that no threat...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.2.c.v

c. Voting systems that use public telecommunications networks shall use protective software at the receiving-end of all communications paths to: v. Provide data to the system audit log indicating t...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.2.d

d. Vendors shall use multiple forms of protective software as needed to provide capabilities for the full range of products used by the voting system....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.3

Voting systems that use public telecommunications networks may become vulnerable, by virtue of their system components, to external threats to the accuracy and integrity of vote of such systems shall ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.3.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.3.b

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.3.c

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.3.d

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.3.e

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.3.f.i

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.3.f.ii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.3.f.iii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.5.4

Ballot recording and vote counting can be performed in either a dedicated or non-dedicated environment. If ballot recording and vote counting operations are performed in an environment that is share...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) tested in subsections;

7.5.4.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) not a shared environment;

7.5.4.b

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) not a shared environment;

7.5.4.c

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) not a shared environment;

7.5.4.d

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) not a shared environment;

7.5.5

If the voting system provides access to incomplete election returns and interactive inquiries before the completion of the official count, the system shall: a. Be designed to provide external acces...

(1) This requirement is not applicable to the current system.; (2) Lab action; (3) please explain why this is not applicable? how can results be output as precincts are recieved if the system does not do this; (4) ; (5) This is covered in subsections as discussed; (6) Acceptable;

7.5.5.a

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.5.5.b

If the voting system provides access to incomplete election returns and interactive inquiries before the completion of the official count, the system shall: b. Design voting system software and it...

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.5.5.b.i

If the voting system provides access to incomplete election returns and interactive inquiries before the completion of the official count, the system shall: b. Design voting system software and its...

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.5.5.b.ii

(1) Not Found; (2) ; (3) Updated citation; requirement verified met within the Appendix A.4 Attachment B and Security WoP's in Attachment C; (4) Acceptable;

7.6

Voting systems that transmit data over public telecommunications networks face security risks that are not present in other voting systems. This section describes standards applicable to voting system...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.6.1

All systems that transmit data over public telecommunications networks shall: a. Preserve the secrecy of voter ballot selections and prevent anyone from violating ballot privacy b. Employ digita...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Public telecom;

7.6.1.a

All systems that transmit data over public telecommunications networks shall: a. Preserve the secrecy of voter ballot selections and prevent anyone from violating ballot privacy ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.6.1.b

All systems that transmit data over public telecommunications networks shall: b. Employ digital signatures for all communications between the vote server and other devices that communicate with the...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.6.1.c

All systems that transmit data over public telecommunications networks shall: c. Require that at least two authorized election officials activate any critical operation regarding the processing of ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.6.2

Systems designed for transmission of telecommunications over public networks shall meet security standards that address the security risks attendant with the casting of ballots from polling places con...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.6.2.1

Vendors of voting systems that cast individual ballots over a public telecommunications network shall provide detailed descriptions of: a. All activities mandatory to ensuring effective voting syst...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.6.2.1.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.6.2.1.b

Vendors of voting systems that cast individual ballots over a public telecommunications network shall provide detailed descriptions of: b. All activities that should be prohibited during voting equ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.6.2.2

These systems shall provide the following capabilities to provide resistance to interruptions of telecommunications service that prevent voting devices at the polling place from communicating with ext...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.6.2.2.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.6.2.2.b

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.6.2.2.c

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no public telecom;

7.6.2.2.d

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.6.2.2.e

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No public telecom;

7.7

This section provides requirements for implementing and using wireless communications within a voting system. These requirements reduce, but do not eliminate, the risk of using wireless communications...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No wireless communication;

7.7.1

a. If wireless communications are used in a voting system, then the vendor shall supply documentation describing how to use all aspects of wireless communications in a secure manner. This document...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No wireless communication;

7.7.1.a.i

a. If wireless communications are used in a voting system, then the vendor shall supply documentation describing how to use all aspects of wireless communications in a secure manner. This document...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no wireless communication;

7.7.1.a.ii

a. If wireless communications are used in a voting system, then the vendor shall supply documentation describing how to use all aspects of wireless communications in a secure manner. This document...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no wireless communication;

7.7.1.a.iii

a. If wireless communications are used in a voting system, then the vendor shall supply documentation describing how to use all aspects of wireless communications in a secure manner. This document...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.1.a.iv

a. If wireless communications are used in a voting system, then the vendor shall supply documentation describing how to use all aspects of wireless communications in a secure manner. This document...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.1.b

b. The details of all cryptographic protocols used for wireless communications, including the specific features and data, shall be documented....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.1.c

c. The wireless documentation shall be closely reviewed for accuracy, completeness, and correctness....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.1.d

d. There shall be no undocumented use of the wireless capability, nor any use of the wireless capability that is not entirely controlled by an election official. Discussion: This can be tested by r...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.1.e.i

e. If a voting system includes wireless capabilities, then the voting system shall be able to accomplish the same function if wireless capabilities are not available due to an error or no service. ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.1.f

f. The system shall be designed and configured so it is not vulnerable to a single point of failure using wireless communications that causes a total loss of any voting capabilities....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.1.g

g. If a voting system includes wireless capabilities, then the system shall have the ability to turn on the wireless capability when it is to be used and to turn off the wireless capability when the w...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.1.h

h. If a voting system includes wireless capabilities, then the system shall not activate the wireless capabilities without confirmation from an elections official....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.2

Since there are a wide variety of wireless technologies (both standard and proprietary) and differing physical properties of wireless signals, it is important to identify some of the characteristics o...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.2.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.2.b

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.2.c

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.2.d

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.3

The transmitted data, especially via wireless communications, needs to be protected to ensure confidentiality and integrity. Examples of election information that needs to be protected include: ballot...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.3.a.i

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.3.a.ii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.3.b

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.3.c

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.4

If wireless communications are used, then the following capabilities shall exist in order to mitigate the effects of a denial of service (DoS) attack: a. The voting system shall be able to function...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.4.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.4.b

If wireless communications are used, then the following capabilities shall exist in order to mitigate the effects of a denial of service (DoS) attack: b. The voting system shall function properly a...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.4.c

If wireless communications are used, then the following capabilities shall exist in order to mitigate the effects of a denial of service (DoS) attack: c. Alternative procedures or capabilities shal...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.4.d

If wireless communications are used, then the following capabilities shall exist in order to mitigate the effects of a denial of service (DoS) attack: d. If infrared is being used, the shielding sh...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.5

Physical security measures to prevent access to a voting system are not possible when using a wireless communications interface because there is no discrete physical communications path that can be se...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.5.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.5.b

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.5.c

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.5.d

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.5.e.i

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.5.f

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.7.5.f.i

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) No Wireless Communication;

7.8.1

Independent verification (IV) systems are electronic voting systems that produce multiple independent cast vote records of voter ballot selections, which can be audited to a high level of precision. F...

(1) This requirement is not applicable to the current system.; (2) Applicable Requirement; (3) Lab action; (4) i did not find where the system did IV in the terms of used here and did not see where the report pointers referred to IV.; (5) ; (6) updated; this was tested within the execution of the Security WoP's and verified; (7) Acceptable;

7.8.2

This section describes a preliminary set of basic characteristics that apply to all types of IV systems. This information is provided for the purpose of introducing these concepts for consideration in...

(1) This requirement is not applicable to the current system.; (2) Lab action; (3) if 7.8.1 is applicable why is this one not?; (4) Acceptable; (5) covered in sub sections;

7.8.2.b1

(1) This requirement is not applicable to the current system.; (2) Lab action; (3) Redundant with 7.8.2 why na if 7.8.1 is applicable?; (4) ; (5) updated; this was tested within the execution of the Security WoP's and verified; (6) Acceptable;

7.8.2.b2

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) redundant with 7.8.2.b1;

7.8.2.b3

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) Redundant with 7.8.2.b1;

7.8.2.b4

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) redundant with 7.8.2.b1;

7.8.2.b5

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) redundant with 7.8.2.b1;

7.9

This section contains requirements for DREs with a Voter Verifiable Paper Audit Trail (VVPAT) component. VVPAT capability is not required for national certification. However, these requirements will b...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.1

a. The voting system shall print and display a paper record of the voter ballot selections prior to the voter making his or her selections final by casting the ballot. Discussion: This is the basic...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.1.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.1.b

b. The paper record shall constitute a complete record of ballot selections that can be used to assess the accuracy of the voting machineâ€™s electronic record, to verify the election results, and, if...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.1.c

c. The paper record shall contain all voter selection information stored in the electronic (ballot image) record. Discussion: The electronic ballot image record cannot hide any information related ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.2

a. The voting equipment shall allow the voter to approve or void the paper record. Discussion: There are three possible scenarios regarding the voterâ€™s disposition of the paper record. â€¢ The...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.2.a

a. The voting equipment shall allow the voter to approve or void the paper record. Discussion: There are three possible scenarios regarding the voterâ€™s disposition of the paper record....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.2.a.b1

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.2.a.b2

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.2.a.b3

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.2.b

b. The voting equipment shall, in the presence of the voter, mark the paper record as being approved by the voter if the ballot selections are accepted; or voided or if the voter decides to change one...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.2.c

c. If the records do not match, the voting equipment shall mark and preserve the paper record and shall provide a means to preserve the corresponding electronic record so the source of error or malfun...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.2.d

d. The voting machine shall not record the electronic record until the paper record has been approved by the voter....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.2.e

e. Vendor documentation shall include procedures to enable the election official to return a voting machine to correct operation after a voter has used it incompletely or incorrectly. This procedure s...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3

a. All cryptographic software in the voting system shall be approved by the U.S. Governmentâ€™s Cryptographic Module Validation Program, as applicable. Discussion: Cryptographic software may be use...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.b

b. The electronic ballot image and paper records shall include information about the election....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.b.i

b. The electronic ballot image and paper records shall include information about the election. i. The voting equipment shall be able to include an identification of the particular election, the vot...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.b.ii

b. The electronic ballot image and paper records shall include information about the election. ii. The records shall include information identifying whether the balloting is provisional, early, or ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.b.iii

b. The electronic ballot image and paper records shall include information about the election. iii. The records shall include a voting session identifier that is generated when the voting equipment...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.c

c. The electronic ballot image and paper records shall be linked by including a unique identifier within each record that can be used to identify each record uniquely and each recordâ€™s corresponding...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.d

d. The voting machine should generate and store a digital signature for each electronic record....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.e.i

e. The electronic ballot image records shall be able to be exported for auditing or analysis on standards-based and /or COTS information technology computing platforms. i. The exported electronic b...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.e.ii

e. The electronic ballot image records shall be able to be exported for auditing or analysis on standards-based and /or COTS information technology computing platforms. ii. The records should be ex...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.e.iii

e. The electronic ballot image records shall be able to be exported for auditing or analysis on standards-based and /or COTS information technology computing platforms. iii. The voting system vendo...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.e.iv

e. The electronic ballot image records shall be able to be exported for auditing or analysis on standards-based and /or COTS information technology computing platforms. iv. The voting system vendor...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.e.v

e. The electronic ballot image records shall be able to be exported for auditing or analysis on standards-based and /or COTS information technology computing platforms. v. The voting system vendor ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.f

f. The paper record should be created in a format that may be made available across different manufacturers of electronic voting systems. Discussion: There may be a future requirement for some comm...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.g.i

g. The paper record shall be created such that its contents are machine readable. Discussion: This can be done by using specific OCR fonts or barcodes. i. The paper record shall contain error co...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.h.i

h. If barcode is used, the voting equipment shall be able to print a barcode with each paper record that contains the human-readable contents of the paper record. Discussion: This requirement is no...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.3.h.ii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT; (4) no VVPAT;

7.9.3.h.iii

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4

a. The voting machine shall provide a standard, publicly documented printer port (or the equivalent) using a standard communication protocol. Discussion: Using a standard, publicly documented print...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.b

b.Tamper-evident seals or physical security measures shall protect the connection between the printer and the voting machine....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.c

c. If the connection between the voting machine and the printer has been broken, the voting machine shall detect this event and record it in the DRE internal audit log....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.d

d. The paper path between the printing, viewing and storage of the paper record shall be protected and sealed from access except by authorized election officials....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.e

e. The printer shall not be permitted to communicate with any system or machine other than the voting machine to which it is connected....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.f

f. The printer shall only be able to function as a printer; it shall not contain any other services (e.g., provide copier or fax functions) or network capability....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.g

g. The voting machine shall detect errors and malfunctions such as paper jams or low supplies of consumables such as paper and ink that may prevent paper records from being correctly displayed, printe...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.h

h. If an error or malfunction occurs, the voting machine shall suspend voting operations and should present a clear indication to the voter and election officials of the malfunction....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.i

i. The voting machine shall not record votes if an error or malfunction occurs....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.j

j. Printing devices should contain sufficient supplies of paper and ink to avoid reloading or opening equipment covers or enclosures and thus potential circumvention of security features; or be able t...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.k

k. Vendor documentation shall include procedures for investigating and resolving printer malfunctions including, but not limited to; printer operations, misreporting of votes, unreadable paper records...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT; (4) no VVPAT;

7.9.4.l

l. Vendor documentation shall include printer reliability specifications including Mean Time Between Failure estimates, and shall include recommendations for appropriate quantities of backup printers ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.m

m. Protective coverings intended to be transparent on voting equipment shall be maintainable via a predefined cleaning process. If the coverings become damaged such that they obscure the paper record,...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.4.n

n. The paper record shall be sturdy, clean, and of sufficient durability to be used for verifications, reconciliations, and recounts conducted manually or by automated processing....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.5

VVPAT records can be printed and stored by two different methods: â€¢ Printed and stored on a continuous spool-to-spool paper roll where the voter views the paper record in a window â€¢ Printed on...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.5.a

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.5.b

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.5.c

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.5.d

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.5.e

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.5.f

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.5.g

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.6

a. All usability requirements from Subsection 3.1 shall apply to voting machines with VVPAT. Discussion: The requirements in this section are in addition to those in Subsection 3.1. b. The votin...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.6.a

a. All usability requirements from Subsection 3.1 shall apply to voting machines with VVPAT. Discussion: The requirements in this section are in addition to those in Subsection 3.1....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.6.b

b. The voting equipment shall be capable of showing the information on the paper in a font size of at least 3.0 mm and should be capable of showing the information in at least two font ranges; 3.0-4.0...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.6.c.i

c. The voting equipment shall display, print and store the paper record in any of the written alternative languages chosen for the ballot. i. To assist with manual auditing, candidate names on the ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.6.c.ii

c. The voting equipment shall display, print and store the paper record in any of the written alternative languages chosen for the ballot. ii. Information on the paper record not needed by the vote...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.6.d

d. The paper and electronic records shall be presented to allow the voter to read and compare the records without the voter having to shift his or her position....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.6.e

e. If the paper record cannot be displayed in its entirety on a single page, a means shall be provided to allow the voter to view the entire record. Discussion: Possible solutions include scrolling...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.6.f

f. If the paper record cannot be displayed in its entirety on a single page, each page of the record shall be numbered and shall include the total count of pages for the record. Discussion: Possibl...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.6.g

g. The instructions for performing the verification process shall be made available to the voter in a location on the voting machine. Discussion: All instructions must meet the usability requiremen...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.7

a. All accessibility requirements from Subsection 3.2 shall apply to voting machines with VVPAT. b. If the normal voting procedure includes VVPAT, the accessible voting equipment should provide fea...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.7.a

a. All accessibility requirements from Subsection 3.2 shall apply to voting machines with VVPAT....

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

7.9.7.b

b. If the normal voting procedure includes VVPAT, the accessible voting equipment should provide features that enable voters who are visually impaired and voters with an unwritten language to perform ...

(1) This requirement is not applicable to the current system.; (2) Acceptable; (3) no VVPAT;

6.4

The accredited test lab shall design and perform test procedures that test the security capabilities of the voting system against the requirements defined in Volume I, Section 7.These procedures shall...

(1) Acceptable;

6.4.1

(1) Acceptable;

1. Lab 2. Functional 3. Usability 4. Hardware 5. Software 6. Telecomm 7. Security 8. QA 9. CM

QA Requirements

Vol

Citation

Text (click to see full text)

Status

Comments

8.1

Quality assurance provides continuous confirmation that a voting system conforms with the Guidelines and to the requirements of state and local jurisdictions. Quality assurance is a vendor function th...

(1) This requirement is not applicable to the current system.;

8.2

The voting system vendor is responsible for designing and implementing a quality assurance program to ensure that the design, workmanship, and performance requirements are achieved in all delivered sy...

(1) This requirement is not applicable to the current system.;

8.2.a

(1) Acceptable;

8.2.b

(1) Found but not acceptable; (2) 8.2.b requires documentation of the process, but the short write up in the TDP does not say anything about how this will be documented, just that meetings will occur. could a sentence or two be added to say that all steps or meetings or recommendations will be documented?; (3) ; (4) Updated to include TDP doc for coverage; (5) Acceptable;

8.2.c.i

(1) Acceptable;

8.2.c.ii

(1) Acceptable;

8.2.d

(1) Acceptable;

8.2.e

(1) Acceptable;

8.3

A vendor who does not manufacture all the components of its voting system, but instead procures components as standard commercial items for assembly and integration into a voting system, shall verify ...

(1) Acceptable;

8.4

The manufacturer or vendor shall be responsible for performing all quality assurance tests, acquiring and documenting test data, and providing test reports for examination by the test lab as part of t...

(1) Not Found; (2) VI, 8.4 is missing from Appendix A.7; (3) ; (4) Updated; (5) Acceptable;

8.5

In order to ensure that voting system parts and materials function properly, vendors shall: a. Select parts and materials to be used in voting systems and components according to their suitability ...

(1) This requirement is not applicable to the current system.;

8.5.a

(1) Acceptable;

8.5.b

In order to ensure that voting system parts and materials function properly, vendors shall: b. Design special tests, if needed, to evaluate the part or material under conditions accurately simulati...

(1) Acceptable;

8.5.c

In order to ensure that voting system parts and materials function properly, vendors shall: c. Maintain the resulting test data as part of the quality assurance program documentation...

(1) Not Found; (2) Section 2.5 does not speak to test data maintenance, as cited in Appendix A.7. I think 2.6.2 would be more accurate to reference in Appendix A..7?; (3) ; (4) Updated; (5) Acceptable;

8.6

The vendor performs conformance inspections to ensure the overall quality of the voting system and components delivered to the test lab for national certification testing and to the jurisdiction for i...

(1) This requirement is not applicable to the current system.;

8.6.a

(1) Acceptable;

8.6.b

(1) Acceptable;

7.2

(1) Acceptable;

7.3

There is no required sequence for performing the examinations of quality assurance and configuration management practices. No other testing is dependent on the performance and results of these examina...

(1) Acceptable;

7.3.1

While not required, the accredited test lab is encouraged to initiate the examinations of quality assurance and configuration management practices early in the overall testing sequence, and to conduct...

(1) Acceptable;

7.5

(1) Acceptable;

7.5.1

The accredited test lab shall examine the vendorâ€™s quality assurance policy to confirm that it: a. Addresses the full scope of the voting system b. Clearly designates a senior level individual...

(1) Acceptable;

7.5.2

(1) Acceptable;

7.5.3

(1) Acceptable;

7.5.4

The accredited test lab shall examine the vendorâ€™s voting system documentation to confirm that it meets the content requirements of Volume I, Subsection 8.7, and Section 2, and is written in a manne...

(1) Acceptable;

1. Lab 2. Functional 3. Usability 4. Hardware 5. Software 6. Telecomm 7. Security 8. QA 9. CM

CM Requirements

Vol

Citation

Text (click to see full text)

Status

Comments

9.2

The vendor shall describe its policies for configuration management in the Technical Data Package. This description shall address the following elements: â€¢ Scope and nature of configuration manag...

(1) Acceptable;

9.3.1

The vendor shall describe the procedures and conventions used to classify configuration items into categories and subcategories, uniquely number or otherwise identify configuration items and name conf...

(1) Acceptable;

9.3.2

When a system component is part of a higher level system element such as a subsystem, the vendor shall describe the conventions used to: a. Identify the specific versions of individual configuratio...

(1) This requirement is not applicable to the current system.;

9.3.2.a

(1) Acceptable;

9.3.2.b

When a system component is part of a higher level system element such as a subsystem, the vendor shall describe the conventions used to: b. Uniquely number or otherwise identify versions ...

(1) Acceptable;

9.3.2.c

When a system component is part of a higher level system element such as a subsystem, the vendor shall describe the conventions used to: c. Name versions...

(1) Acceptable;

9.4

The vendor shall establish formal procedures and conventions for establishing and providing a complete description of the procedures and related conventions used to: a. Establish a particular insta...

(1) This requirement is not applicable to the current system.;

9.4.a

(1) Acceptable;

9.4.b

The vendor shall establish formal procedures and conventions for establishing and providing a complete description of the procedures and related conventions used to: b. Promote subsequent instances...

(1) Acceptable;

9.4.c

The vendor shall establish formal procedures and conventions for establishing and providing a complete description of the procedures and related conventions used to: c. Promote subsequent instances...

(1) Acceptable;

9.5

Configuration control is the process of approving and implementing changes to a configuration item to prevent unauthorized additions, changes or deletions. The vendor shall establish such procedures a...

(1) This requirement is not applicable to the current system.;

9.5.a

(1) Acceptable;

9.5.b

(1) Acceptable;

9.5.c

(1) Acceptable;

9.5.d

(1) Acceptable;

9.6

The release process is the means by which the vendor installs, transfers or migrates the system to the accredited test lab and, eventually, to its customers. The vendor shall establish such procedures...

(1) This requirement is not applicable to the current system.;

9.6.a

(1) Acceptable;

9.6.b

(1) Acceptable;

9.6.c

(1) Lab action; (2) I think this reference should be changed in the A.7.-1 document chart thing, because it seems like 2.4.6 and 2.4.7 refer to this, not section 2.4.; (3) Acceptable; (4) ; (5) Section 2.4 is listed to encompass the entire section which is needed to see the entire release process. ; (6) Acceptable;

9.6.d

(1) Lab action; (2) Should this also refer people to the Operation Procedures cited in 2.4.7 of the CM doc?; (3) Acceptable;

9.7.1

The Physical Configuration Audit is conducted by the accredited test lab to compare the voting system components submitted for certification to the vendorâ€™s technical documentation. For the PCA, a ...

(1) This requirement is not applicable to the current system.;

9.7.1.a

(1) Acceptable;

9.7.1.b

(1) Acceptable;

9.7.1.c

The Physical Configuration Audit is conducted by the accredited test lab to compare the voting system components submitted for certification to the vendor’s technical documentation. For the PCA, a ...

(1) Acceptable;

9.7.1.d

(1) Acceptable;

9.7.1.e

(1) Acceptable;

9.7.1.f

(1) Acceptable;

9.7.1.g

(1) Acceptable;

9.7.1.h.i

(1) Acceptable;

9.7.1.h.ii

(1) Acceptable;

9.7.2

The Functional Configuration Audit is conducted by the accredited test lab to verify that the system performs all the functions described in the system documentation. The vendor shall: a. Completel...

(1) Acceptable;

9.7.2.a

(1) Acceptable;

9.7.2.b.i

(1) Acceptable;

9.7.2.b.ii

(1) Acceptable;

9.7.2.b.iii

(1) Acceptable;

9.8

Often, configuration management activities are performed with the aid of automated tools. Assuring that such tools are available throughout the system life cycleâ€”including whether the vendor is acqu...

(1) Acceptable;

9.8.a

(1) Acceptable;

9.8.b

(1) Acceptable;

9.8.c

(1) Acceptable;

7.3.2

As described in Volume I, Section 9, the functional configuration audit verifies that the voting system performs all the functions described in the system documentation. To help ensure an efficient te...

(1) Acceptable;

7.4

The examination of configuration management practices shall address the full scope of requirements described in Volume I, Section 9, and the documentation requirements described in Section 2. In addit...

(1) Acceptable;

7.4.1

(1) Acceptable;

7.4.2

(1) Acceptable;

7.4.3

(1) Acceptable;

7.4.4

(1) Acceptable;

7.4.5

(1) Acceptable;

7.4.6

(1) Acceptable;

7.4.7

The accredited test lab shall examine the configuration management resource information submitted by the vendor to determine whether sufficient information has been provided to enable another organiza...

(1) Acceptable;