Secretary of State Voting System Security Standards

http://www.sos.state.tx.us/

Juanita Woods

Secretary of State Elections Division

HAVA Information Security Manager

2. Texas Voting System Standards as prescribed by

Secretary of State Voting System Security Standards

Texas Administrative Code

Texas Election Code

Help America Vote Act (2002)

3. The Texas Voting System Certification Process

1. My role as the HAVA Information Security Manager

Establishes policies and implements directives related to the operation and security of state certified electronic voting systems and machines in accordance with the Texas Administrative Code, Texas Election Code, Election Advisory 2008-09, and the Help America Vote Act, 2002 (HAVA).

Secretary of State Voting System Security Standards

Manages the Voting System Certification Program.

HAVA Information Security Manager

A voting system may not be used in an election unless the system:

1) preserves the security of the ballot

2) is suitable for the purpose for which it is intended

3) operates safely, efficiently, and accurately

4) is safe from fraudulent or unauthorized manipulation

5) permits voting on all offices and measures to be voted on at an election

6) prevents counting votes on offices and measures on which the voter is not entitled to vote

7) prevents counting votes by the same voter for more than one candidate for the same office and prevents counting votes for more than the number of

candidates for which the voter is entitled to vote

Secretary of State Voting System Security Standards

Secretary of State Voting System Security Standards

A voting system may not be used in an election unless the system:

8) prevents counting a vote on the same office or measure more than once

9) permits write-in voting

10) is capable of straight-party voting

11) is capable of providing records from which the operation of the voting system may be audited

Secretary of State Voting System Security Standards

Voting System Certification Process

Vendor submits request for system examination according to established examination dates

•Form 100, Form 100 Schedule A, Form 101 with attachments

•$3000 Certification Fee

•User operating manuals

•Maintenance manuals

•Training material

•Independent Testing Authority (ITA) Final Reports

•Change Logs detailing modifications/changes

•hardware to be examined for certification

•sample ballots for testing voting machines

1

ITA submits source codes and applicable software/firmware2

Secretary of State Voting System Security Standards

Voting System Certification Process

Elections Division

•notifies and secures Examiners for examination

•completes vendor information packets for Examiners

•schedules examination dates and complete notifications

•prepares sample ballot templates for testing voting system

3

Examiners conduct examination of voting system pending certification4•ensure state and federal standards are met

•conduct technical, procedural and security testing on voting

machine being tested

• clarify questions with vendors

•submit Reports of Examination within 30 days of examination

Secretary of State Voting System Security Standards

Voting System Certification Process

Elections Division

•reviews Examiner Reports and clarifies questions

•posts examiner reports to SOS website

•schedules and posts notice of public hearing

•holds public hearing

•makes recommendations to Secretary of State

5

Secretary of State

•certifies or denies certification of voting system

6