Auditing of the Internet voting system: Estonian case Prof. Ülle Madise Member of the National Electoral Committee

The aim of certification = ensure that the I-voting platform & system is reliable and sure How it is fulfilled in Estonia?  independent certified IT auditors + IT auditors / observers from NGO  check the I-voting platform against a list of requirements prevoiusly set up  the list of requirements is set up according to the law requirements & risk analysis provided by academia & NEC  whole procedure documented & video-recorded  most important procedures open to the public

Project management Political agenda 2001 Academic analyses Election Act 2002 & 2005; constitutional review 2005 Centralized & independent management: National Eectoral Committee (independent from political & business interests) Project leader Project team & experts Analyse, private and public tests (2002-currently) Independent IT-Auditing (2002-currently)

National Electoral Comittee Independent from political parties & business 2 judges appointed by the Head of the Supreme court 1 representative appointed by Legal chancellor (ombudsman), Auditor General, Head of the State Chancellery, Head of the Parliaments Office and Prosecutor General members in total

Summary Different standards for –I-voting, and machine voting –centrally ordered, accepted & supervised system, and systems / platforms / voting machines on the market Single centrally ordered, accepted & supervised I- voting system  independent reliable IT audit & NGO organized IT audit / observation required –full access to the documentation & procedures Independent qualified IT audit –before –during I-voting disclosure of the audit report

Statistics 2005, 2007 & 2009 LE 2005PE 2007EPE 2009LE 2009 entitled to vote e-votes counted e-votes among all votes 1,9 %5,5 %14,8 %15,7 % first electronical use of ID card 61 %39 %19 %18,5 % e-votes among advance votes 7,2 %17,6 %45,4 %44,1 % e-votes cast abroad among all e-votes n.a 2 % countries 51 3 % countries 66 2,8 % countries 82