State Board of Elections: Voting System Compliance Review
Motion approved by the State Board of Elections regarding post-EAC testing and certification requirements for voting systems, including source code review and adherence to Voluntary Voting System Guidelines (VVSG). The document outlines the standards, procedures, and certifications necessary for ensuring the integrity and security of voting equipment.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
EXECUTIVE DIRECTORS REPORT Karen Brinson Bell October 1, 2019
Text of Motion Approved by the State Board of Elections September 6, 2019 Meeting State Board staff shall provide documentation of the State s post-EAC testing/examination to meet each of the following requirements of G.S. 163A-1115 (e). The State Board s (or independent expert s) review of the vendors source code in the following required areas of focus: Security, Application vulnerability, Application code, Wireless security, Security policy and processes, Security/privacy program management, Technology infrastructure and security controls, Security organization and governance, Operational effectiveness. If documentation is unavailable, please provide the rationale, or waiver granted. Provide documentation of source code delivery placed in escrow (when delivered, current custody). State Board staff shall also provide a response to the following: NCSBE s Elections Systems Certification Program 3.4.1.1 states: The voting system or equipment must meet the requirements contained in the most recent version or versions of the Voluntary Voting System Guidelines (VVSG) currently accepted for testing and certification by the U.S. Election Assistance Commission (EAC). Why would NCSBE certify equipment EAC-certified under VVSG 1.0 (2005), rather than VVSG 1.1 (2015)?
Relevant Authority NCGS 163A-1115. Voting systems: powers and duties of State Board Elections Systems Certification Program, Section 3.4.1.1 General Standards Other documents of reference: Voluntary Voting System Guidelines (VVSG) Help America Vote Act of 2002
Source Code Review N.C.G.S. 163A-1115(e): Prior to certifying a voting system, the State Board shall review, or designate an independent expert to review, all source code made available by the vendor pursuant to this section and certify only those voting systems compliant with State and federal law. SBE relied on source code review by independent test laboratories accredited by the EAC In accordance with Sections 3.4.2.1 and 3.5.1.4 of Certification Program EAC accredited Voting System Testing Laboratories (VSTLs): Pro V&V SLI Compliance Source code review by a VSTL meets the requirements of Section 3.5.6 of the Certification Program and GS 163A-1115(e)
Source Code Review VVSG 1.0 requires full source code review by an accredited test lab. Must adhere to requirements in Volume I, Section 5, and VVSG 1.0, Volume II, Section 5.4 Standards cover the following: mechanisms and constructs for controlling program logic and execution; the modularity and readability of the code; naming, coding, and commenting conventions; and audibility, logging, and error handling.
Version of VVSG Certification Program, Section 3.4.1.1: The voting system or equipment must meet the requirements contained in the most recent version or versions of the Voluntary Voting Systems Guidelines currently accepted for testing and certification by the U.S. Election Assistance Commission. Both VVSG 1.0 and VVSG 1.1 are approved guidelines by the EAC. No currently certified voting system has been certified by the EAC to VVSG 1.1
Version of VVSG Dates to consider: January 6, 2016: EAC unanimously adopts implementation of VVSG 1.1 July 6, 2017: Transition date for VVSG 1.1 (18 months from adoption) New systems tested until this date are tested to VVSG 1.0 Acceptance dates for application packages: May 4, 2016: EAC accepts Clear Ballot s ClearVote 1.4 September 7, 2016: EAC accepts Hart InterCivic s Verity Voting 2.2 September 14, 2016: EAC accepts ES&S s EVS 5.2.2.0 January 31, 2017: SBE adopts Certification Program
Source Code Escrow N.C.G.S. 163A-1115(a)(6): With respect to all voting systems using electronic means, that the vendor provide access to all of any information required to be placed in escrow by a vendor pursuant to G.S. 163A-1118 for review and examination by the State Board; the Department of Information Technology; the State chairs of each political party recognized under G.S. 163A-950; the purchasing county; and designees as provided in subdivision (9) of subsection (f) of this section. ES&S submitted information for escrow on September 25, 2019
Conclusion Elections Systems Certification Program complies with NCGS 163A- 1115(e). The following voting systems meet the requirements of Section 3.4.1.1 of the Program: Clear Ballot Group Clear Vote 1.4 Election Systems & Software EVS 5.2.2.0 Hart InterCivic Verity Voting 2.2
First 100 Days June 1, 2019 to September 9, 2019 Agency reorganization & HR initiatives New Board Chairman Budget Impasse Voting systems certification Photo ID Seminars and first mailing 3 elections Hurricane Dorian, response teams, and partnerships State Conference Quarterly All Hands Meetings District Meetings: 1, 2, 3, 4, and 8 Process Improvement Cyber Security Advisory Panel and CISO-as-a-Service Tabletop Exercise Legislation review and committees NASED Summer Meeting Campaign Finance Penalties
Next 100 Days September 10, 2019 to December 19, 2019 State Fair Deputy Director of Election Administration Business Continuity & Disaster Recovery Plan Campaign Finance Compliant Policy Investigations Policy Photo ID mailings and training Candidate Filing: 12/2-20 NCBA Presentation Special and Municipal Elections National Voter Registration Day 6 counties without directors 3 announced retirements 5 Regional Voting System Demonstrations District Meetings: 5 and 6 6 Regional Cyber Security Workshops and Paper Ballot Voting Systems Tours Voting District Program
Voter ID: Website Thank You!
