Statewide Voter Registration List (Cont'd)

15.	Has your state established, or will it establish by January 1, 2006, documented standards or guidance for computer and procedural controls to prevent unauthorized access to the computerized voter registration list?
	(CHECK ONLY ONE ANSWER)
	1.		Currently have established standards or guidance
	2.		Will have established standards or guidance by January 1, 2006
	3.		Plan to establish standards or guidance after January 1, 2006
	4.		No plans to establish standards or guidance (GO TO QUESTION 17.)
	5.		Don't know (GO TO QUESTION 17.)

16.	Which of the following sources did you (or will you) use to establish standards or guidance?
	(CHECK ALL THAT APPLY)
	1.		National or international organization (e.g., National Institute of Standards and Technology; Information Systems Audit and Control Association)
	2.		State officials
	3.		Local jurisdiction officials
	4.		Consultant or vendor
	5.		Other source (describe below)
	6.		Don't Know

	a. If applicable, briefly describe other source:

17.	The management of registration information is increasingly complex and can involve many types of expertise. Who performs (or will perform as of January 1, 2006) each of the following possible functions for your statewide computerized voter registration list, if at all?
	*(CHECK ALL THAT APPLY IN EACH ROW)*

		State officials	Local jurisdiction officials	Other (independent consultants, vendors, etc.)	Not performed	Don't know
	a. Identify voter registration system requirements
	b.Acquire systems, components, and services
	c.Establish policies and plans for operating the system
	d.Design and develop applications, data files, and other system components
	e.Test systems and components to ensure compliance with requirements
	f.Manage system operations
	g.Provide technical support, repair, and service for operational equipment
	h.Monitor and evaluate security and privacy controls

18.	Regarding implementation of the HAVA requirement for a statewide voter registration list, does your state have any concerns regarding each of the following?
	*(CHECK ONE IN EACH ROW)*

		Have major concern about	Have minor concern about	Don't have concern about	Don't know	N/A
	a. Whether your state's system will be sufficiently developed for the January 1, 2006 deadline (e.g., fully interactive and operational in all localities)
	b. Whether your state's system will address all of the verification requirements by January 1, 2006 (e.g., capability to match with SSA, DMV, or other state records)
	c. Whether your state's system will have adequate system capabilities for controlling access to registration lists
	d. Whether your state's system will be sufficiently protected against fraud, misuse, disruption, or disruption of services
	e. Whether your state's system will have adequate system capabilities to maintain privacy of voter information
	f. Whether your state's system will have sufficient interoperability with other election and public records systems

		Have major concern about	Have minor concern about	Don't have concern about	Don't know	N/A
	g. Whether your state's system will be adequately tested to identify all potential operational problems
	h. Whether your staff will be adequately prepared to operate the system
	i. Whether state action needed to implement certain provisions of HAVA (such as motor vehicle agency and SSA matching) will become effective by the January 1, 2006 deadline
	j. Whether SSA will be able to return responses to verification requests in a timely manner
	k. Whether local jurisdictions will be able to resolve nonmatches resulting from SSA verification checks

19.	Have you taken action or do you plan to take action on each of the following possible activities as they affect your statewide voter registration system?
	*(CHECK ONE IN EACH ROW)*

		Action taken as of 8/1/05	Action to be taken by 1/1/06	Action to be taken after 1/1/06	Action planned but date uncertain	No action currently planned	Don't know
	a. Installing or activating mechanisms to detect or track unauthorized actions
	b. Installing or activating mechanisms to protect voter privacy (to the extent defined by state or federal law)
	c. Electronic exchange of voter registration information with at least one other state
	d. Upgrading system processing speed or records capacity
	e. Other major activity (specify below)

	f. If applicable, briefly describe other major activity:

Full Report: GAO-06-450

Table of Contents | Previous | Next