TGDC Meeting, July 2011 UOCAVA Roadmap Update Nelson Hastings, Ph.D. Technical Project Leader for Voting Standards, ITL

TGDC Meeting, July 2011Page 2 Purpose Provide an update on the UOCAVA roadmap presented at the last TGDC meeting

TGDC Meeting, July 2011Page 3 Completed Activities EAC guidelines for kiosk-based remote voting pilot projects Uniformed and Overseas Citizens Absentee Voting Act (UOCAVA) Pilot Program Testing Requirements Final version released August 25, 2010 UOCAVA Solutions Summit organized by FVAP, EAC, and NIST Held August 6-7, 2010 in DC FVAP’s Electronic Voting Support Wizard (EVSW) pilot program Utilized in November 2010 election

TGDC Meeting, July 2011Page 4 Completed Activities FVAP Metrics – December 2010 NISTIR 7770: Security Considerations for Remote Electronic UOCAVA Voting Final version released February 23, 2011 EAC, FVAP, and NIST provided EAC’s Advisory Boards with information about legal, technical, and policy issues associated with remote election voting systems Panelists at Standard Board meeting on February 24-25, 2011 in Oklahoma City Presentations at Board of Advisors meeting on June 6-7, 2011 in DC

TGDC Meeting, July 2011Page 5 Completed Activities TGDC’s Draft “Accessibility and Usability Considerations for UOCAVA Remote Voting Systems” Delivered to EAC on March 2, 2011 Identify possible 2012 pilot projects for TGDC development material TGDC whitepaper titled “Possible UOCAVA Pilot Projects for the Federal Election” delivered to EAC on March 2, 2011

TGDC Meeting, July 2011Page 6 Completed Activities FVAP provided a detailed description of the extent and nature of UOCAVA voter successes and the applicability of historical programs to address the causes of lower success rates Part of the “2008 Post Election Survey Report” released on March 17, 2011 FVAP organized a Secure Ballot Delivery workshop Follow-up to the UOCAVA Solutions Summit EAC and NIST participated in workshop Held on March 23-24, 2011 in Chicago

TGDC Meeting, July 2011Page 7 Ongoing Activities NIST leading effort for Common Data Format for blank ballot delivery in conjunction with IEEE Currently in the IEEE editorial review process Out for IEEE-SA ballot in August 2011 Approved version: Fall 2011 FVAP Cyber Security Review Group (CSRG) First meeting held on July 1, 2011 Provide background and outline objectives of CSRG Describe FVAP program of work for UOCAVA voting Next meeting scheduled for November 2011 Presentation of initial results from voting system test laboratory testing and penetration testing

TGDC Meeting, July 2011Page 8 Ongoing Activities NISTIR 7711:Security Best Practices for the Electronic Transmission of Election Materials for UOCAVA Voters Final version: August 2011 NISTIR 7682: Information System Security Best Practices for UOCAVA-Supporting Systems Final version: August 2011 EAC is collecting and compiling information on previous international internet voting efforts Tentatively titled “A Survey of Internet Voting and Associated Risk” Final version: August 2011

TGDC Meeting, July 2011Page 9 Ongoing Activities TGDC development of high-level guidelines for remote electronic absentee voting systems UOCAVA working group will present a draft version for discussion at this meeting FVAP’s Electronic Absentee System for Elections (EASE) grant program Grants to support blank ballot distribution to UOCAVA voters for November 2012 deployment Applications received by July 11, 2011 currently under review

TGDC Meeting, July 2011Page 10 Ongoing Activities UOCAVA Solutions working group organized by FVAP Follow-up to the Secure Ballot Delivery workshop EAC and NIST to participate in working group Next meeting scheduled for August 6-7, 2011 in San Francisco FVAP review of 2010 state activities for UOCAVA voters Final report: October 2011 FVAP lessons learned review of EVSW pilot program Final report: October 2011

TGDC Meeting, July 2011Page 11 Ongoing Activities FVAP is having voting system testing laboratories (VSTLs) test five EVSW wizards to the security requirements in EAC’s UOCAVA Pilot Program Testing Requirements Final report: October 2011 Mock election and penetration testing organized by FVAP to be held on August 2-4, 2011 Four teams will perform penetration Final report: October 2011 FVAP Wounded Warrior project demonstration: August 24-28, 2011

TGDC Meeting, July 2011Page 12 Future Activities TGDC to develop requirements for the UOCAVA demonstration project UOCAVA working group in the process of developing their approach and will provide update at this meeting TGDC to develop risk analysis of the current UOCAVA voting process UOCAVA working group in the process of developing its approach and will provide update at this meeting Update of EAC’s UOCAVA best practices Due to limited EAC resources no timeline can be provided

TGDC Meeting, July 2011Page 13 Future Activities 2012 FVAP pilot projects Utilization of EASE grant funded projects from FVAP November 2012 FVAP review of EASE grant lessons learned Review of the EASE grant funded projects used in the 2012 election Final report: August 2013 TGDC to provide technical support in analysis of lessons learned from 2012 pilot projects Spring/Summer 2013, if requested by FVAP

TGDC Meeting, July 2011 Discussion/Questions Page 14