Sec. 201. Cybersecurity requirements for and testing and certification of voting systems
711 words·~3 min read·
/bill/116/s/2238/is/section-201A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Subtitle A of title XXII of the Homeland Security Act of 2002 ( 6 U.S.C. 651 et seq.) is amended by adding at the end the following: Not later than 180 days after the date of enactment of Securing America's Federal Elections Act , the Secretary, acting through the Director and in consultation with the Director of the National Institute of Standards and Technology and the Technical Guidelines Development Committee established under section 221 of the Help America Vote Act of 2002 ( 52 U.S.C. 20961 ), shall establish mandatory cybersecurity standards for the use in Federal elections of the following:
Ballot tabulation devices (within the meaning of section 301(a)(9) of the Help America Vote Act of 2002). Ballot marking devices (within the meaning of section 301(a)(12) of such Act). Election management systems, including those systems used— to configure ballot tabulation devices and ballot marking devices; to aggregate election results; and to design paper ballots. Electronic poll books; Any government database, website, or associated information system used by voters or government agencies for voter registration (including the management of voter registration status).
Systems used to deliver or publish election results. Such other components of voting systems (as defined in section 301(b) of such Act) as is determined appropriate by the Director. Any State or jurisdiction which intends to use a ballot marking device or a ballot tabulation device in an election for Federal office may submit an application to the Director for cybersecurity testing and certification of the hardware and software of such device under this section. Upon receipt of an application for testing under this section, the Director, in consultation with the Director of the National Institute of Standards and Technology, shall contract with a qualified laboratory for the testing of whether— in the case of a ballot tabulation device intended to be used by the State or jurisdiction, the device meets the requirements of section 301(a)(9)(B) of the Help America Vote Act of 2002; and in the case of a ballot marking device intended to be used by the State or jurisdiction, the device meets the requirements of section 301(a)(12)(A) of such Act.
In the case of a ballot marking device or ballot tabulation device for which the source code has been published under an open source license, the contract under subparagraph
(A)shall also include, at the request of any State or jurisdiction, testing of whether such device meets any applicable requirements of the State or jurisdiction. Any contract described in paragraph
(1)shall require the qualified research laboratory to— not later than 30 days before testing begins, submit to the Director for approval the protocol for the simulated election scenario used for testing the security of the ballot marking device or ballot tabulation device, as the case may be; use only protocols approved by the Director in conducting such security testing; and submit to the Director a report on the results of the security testing. For purposes of this section, the term qualified research laboratory means a laboratory accredited under this subsection by the Director, in consultation with the Director of the National Institute of Standards and Technology. The Director shall— publish on the website of the Cybersecurity and Infrastructure Security Agency the results of the testing conducted under subsection (b); and certify— a ballot tabulation device if the ballot tabulation device is determined by the qualified research laboratory to meet the requirements of section 301(a)(9)(B) of the Help America Vote Act of 2002; and a ballot marking device if the ballot marking device is determined by the qualified research laboratory to meet the requirements of section 301(a)(12)(A) of such Act. The Director may not charge any fee to a State or jurisdiction, a developer or manufacturer of a ballot marking device or ballot tabulation device, or any other person in connection with testing and certification under this section (including any testing conducted under subsection (b)(1)(B)). . The table of contents in section 1(b) of the Homeland Security Act of 2002 ( Public Law 107–296 ; 116 Stat. 2135) is amended by inserting after the item relating to section 2214 the following: Sec. 2215. Mandatory cybersecurity requirements for systems used in Federal elections. Sec. 2216. Testing and certification of ballot marking and ballot tabulation device cybersecurity. .
Connectionstraces to 2
Traces to 2 documents
2 references not yet in our index
- Pub. L. 107-296
- 116 Stat. 2135
Citation graph
cites case law
Sec. 201
Cybersecurity requirements for and testing and certification of voting systems
Pub. L.Pub. L. 107-296
Stat.116 Stat. 2135
Cites 4Cited by 0 across 0 sources