EAC OIG audited EAC’s testing and certification program. The Help America Vote Act established requirements for EAC to provide for the “testing, certification, decertification, and recertification of voting system hardware and software by accredited laboratories.”
Audit of the U.S. Election Assistance Commission's Testing and Certification Program
Status of Recommendations
Establish regular coordination with NIST and review the accreditation procedures for voting system test labs to reduce potential areas of duplication or identify efficiencies.
Develop policies to ensure periodic meetings with voting system test laboratories and voting system manufacturers occur and the non-sensitive meeting minutes are published.
Assess the policies and procedures used by its testing and certification program and establish, identify, and update them as needed.
Improve the organization and quality of testing and certification materials on the EAC website.
Update the records disposition schedule for the testing and certification program.
Utilize federal guidance to conduct a staffing assessment for the testing and certification program. As part of this, consider what technical competencies are required for the team and if any are already covered with the NIST review.
Identify, measure, and assess risks related to its testing and certification program, ideally as part of a broader enterprise risk management program.