Draft Test Assertions for VVSG 1.0 Section 7.9.5 (Tabular Format), August 2015

Requirement

Assertion(s)

VVSG 1.0 Requirement 7.9.5: VVPAT records can be printed and stored by two different methods:

• Printed and stored on a continuous spool-to-spool paper roll where the voter views the paper record in a window.
• Printed on separate pieces of paper, which are deposited in a secure receptacle. If a requirement applies to only one method, that will be specified. Otherwise, the requirement applies to both.

None.

Note: This is a high-level requirement that is fulfilled by the lower-level ones.

VVSG 1.0 Requirement 7.9.5a: Voter privacy shall be preserved during the process of recording, verifying and auditing his or her ballot selections.

TA795a-1: Voter privacy SHALL be preserved during the process of recording his or her ballot selections.

TA795a-2: Voter privacy SHALL be preserved during the process of verifying his or her ballot selections.

TA795a-3: Voter privacy SHALL be preserved during the process of auditing his or her ballot selections.

TA795a-4: For any implementation of the VVPAT, the VVPAT SHALL conform to the usability requirements of 3.1.7.

TA795a-4-1: For any implementation of the VVPAT, the VVPAT SHALL conform to the usability requirements of 3.1.7 that reference the ballot interface.

TA795a-4-2: For any implementation of the VVPAT, the VVPAT SHALL conform to the usability requirements of 3.1.7 that reference the cast vote record.

TA795a-5: For any implementation of the VVPAT, the VVPAT SHALL conform to the test assertions of 3.1.7.

TA795a-5-1: For any implementation of the VVPAT, the VVPAT SHALL conform to the test assertions of 3.1.7 that reference the ballot interface.

TA795a-5-2: For any implementation of the VVPAT, the VVPAT SHALL conform to the test assertions of 3.1.7 that reference the cast vote record.

TA795a-6: The voting system SHALL issue a receipt that is protected from allowing physical removal by the voter.

VVSG 1.0 Requirement 7.9.5b: When a VVPAT with a spool-to-spool continuous paper record is used, a means shall be provided to preserve the secrecy of the paper record of voter selections.

TA795b-1: IF a voter makes ballot selections during a voting session, THEN at the beginning of the next voting session, ballot selections SHALL have original default (no selection) values.

VVSG 1.0 Requirement 7.9.5c: When a VVPAT with a spool-to-spool continuous paper record is used, no record shall be maintained of which voters used which voting machine or the order in which they voted.

None (requirement is operational).

VVSG 1.0 Requirement 7.9.5d: The electronic and paper records shall be created and stored in ways that preserve the privacy of the voter.

TA795d-1: When the electronic records are created the privacy of the voter SHALL be preserved.

TA795d -2: When the paper records are created the privacy of the voter SHALL be preserved.

VVSG 1.0 Requirement 7.9.5e: The privacy of voters whose paper records contain an alternative language shall be maintained.

None (requirement is operational).

VVSG 1.0 Requirement 7.9.5f: Unique identifiers on the paper record are displayed or formatted in such a way that they are not memorable to voters, such as by obscuring them in other characters.

TA795f-1: Unique identifiers SHALL be displayed in a representation that is NOT easily memorable by the voter.

TA795f-2: Unique identifiers MAY be obscured in other characters in order to make them NOT easily memorable to the voter. (from Discussion).

VVSG 1.0 Requirement 7.9.5g: Both paper rolls and paper record secure receptacles shall be controlled, protected, and preserved with the same security as a ballot box.

None (requirement is operational).