Skip to main content    

An official website of the United States government

Here’s how you know

**Official websites use .gov**              A **.gov** website belongs to an official government organization in the United States.            

**Secure .gov websites use HTTPS**              A **lock** (  LockA locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.            

https://www.nist.gov/itl/voting/test-assertions-vvsg-10-section-7212-august-2015

            -  Topics  -  All Topics 
-  Advanced communications 
-  Artificial intelligence 
-  Bioscience 
-  Buildings and construction 
-  Chemistry 
-  Climate 
-  Cybersecurity 
-  Electronics 
-  Energy 
-  Environment 
-  Fire 
-  Forensic science 
-  Health 
-  Information technology 
-  Infrastructure 
-  Manufacturing 
-  Materials 
-  Mathematics and statistics 
-  Metrology 
-  Nanotechnology 
-  Neutron research 
-  Performance excellence 
-  Physics 
-  Public safety 
-  Resilience 
-  Standards 
-  Transportation 
 
            -  Publications 
            -  Labs & Major Programs  -  Laboratories    -  Communications Technology Laboratory 
  -  Engineering Laboratory 
  -  Information Technology Laboratory 
  -  Material Measurement Laboratory 
  -  Physical Measurement Laboratory 
-  User Facilities    -  NIST Center for Neutron Research 
  -  CNST NanoFab 
-  Research Test Beds 
-  Research Projects 
-  Tools & Instruments 
-  Major Programs    -  Baldrige Performance Excellence Program 
  -  CHIPS for America Initiative 
  -  Manufacturing Extension Partnership (MEP) 
  -  Office of Advanced Manufacturing 
  -  Special Programs Office 
  -  Technology Partnerships Office 
 
            -  Services & Resources  -  Standards and Measurements    -  Calibration Services 
  -  Laboratory Accreditation (NVLAP) 
  -  Quality System 
  -  Standard Reference Materials (SRMs) 
  -  Standards.gov 
  -  Time Services 
  -  Office of Weights and Measures 
-  Software 
-  Data    -  Chemistry WebBook 
  -  National Vulnerability Database 
  -  Physical Reference Data 
  -  Standard Reference Data (SRD) 
-  Storefront 
-  License & Patents 
-  Computer Security Resource Center (CSRC) 
-  NIST Research Library 
 
            -  News & Events  -  News 
-  Events 
-  Blogs 
-  Feature Stories 
-  Awards 
-  Video Gallery 
-  Image Gallery 
-  Media Contacts 
 
            -  About NIST  -  About Us    -  Leadership 
  -  Organization Structure 
  -  Budget & Planning 
-  Contact Us 
-  Visit 
-  Careers    -  Student programs 
-  Work with NIST 
-  History    -  NIST Digital Archives 
  -  NIST Museum 
  -  NIST and the Nobel 
-  Educational Resources 
 

Information Technology Laboratory

## Voting

-  Research and Projects  Expand or Collapse    -  VVSG 
  -  TGDC 
  -  Test Labs 
  -  Accessibility and Human Factors 
  -  Election Security 
  -  Interoperability 
-  Events 
-  About Us 
-  History of Voting  Expand or Collapse    -  Archived Research Papers 
-  Contact Us 

# Test Assertions for VVSG 1.0 Section 7.2.1.2, August 2015

## Share

Facebook

Linkedin

Twitter

Email

**Requirement 7.2.1.2**

**VVSG 1.0 Requirement 7.2.1.2:**Vendors shall provide a detailed description of all system access control measures designed to permit authorized access to the system and prevent unauthorized access. Examples of such measures include:

a.    Use of data and user authorization

b.   Program unit ownership and other regional boundaries

c.    One-end or two-end port protection devices

d.   Security kernels

e.    Computer-generated password keys

f.    Special protocols

g.   Message encryption

h.   Controlled access security

Vendors also shall define and provide a detailed description of the methods used to prevent unauthorized access to the access control capabilities of the system itself.

**Test Assertions**

**TA7212-1:** The TDP SHALL contain a detailed description of all system access control measures designed to permit authorized access to the voting system.

**TA7212-2:** The TDP SHALL contain a detailed description of all system access control measures designed to prevent unauthorized access to the voting system.

**TA7212a-1:** The description of measures designed to permit authorized access to the system and/or prevent unauthorized access MAY include use of data and user authorization.

**TA7212b-1:** The description of measures designed to permit authorized access to the system and/or prevent unauthorized access MAY include program unit ownership and other regional boundaries.

**TA7212c-1:** The description of measures designed to permit authorized access to the system and/or prevent unauthorized access MAY include one-end or two-end port protection devices.

**TA7212d-1:** The description of measures designed to permit authorized access to the system and/or prevent unauthorized access MAY include security kernels.

**TA7212e-1:** The description of measures designed to permit authorized access to the system. and/or prevent unauthorized access MAY include computer-generated password keys.

**TA7212f-1:** The description of measures designed to permit authorized access to the system and/or prevent unauthorized access MAY include special protocols.

**TA7212g-1:** The description of measures designed to permit authorized access to the system and/or prevent unauthorized access MAY include message encryption.

**TA7212h-1:** The description of measures designed to permit authorized access to the system and/or prevent unauthorized access MAY include controlled access security.

**TA7212i-1:** The description of measures designed to permit authorized access to the system and/or prevent unauthorized access MAY include any other types of access control measures implemented that are not included in the previous test assertions.

**TA7212-3:** The TDP SHALL contain a description of the methods used to prevent unauthorized access to the access control capabilities of the system itself.

**Operational Definitions**

**access control** – The process of granting or denying specific requests to: 1) obtain and use information and related information processing services; and 2) enter specific physical facilities (e.g., federal buildings, military establishments, border crossing entrances).

*(source: http://nvlpubs.nist.gov/nistpubs/ir/2013/NIST.IR.7298r2.pdf)*

Information technologyVoting systems

### HEADQUARTERS

301-975-2000

Webmaster | Contact Us | Our Other Offices

TwitterFacebookLinkedInInstagramYouTubeGiphyRSS FeedMailing List

Feedback

            -  Site Privacy 
            -  Accessibility 
            -  Privacy Program 
            -  Copyrights 
            -  Vulnerability Disclosure 
            -  No Fear Act Policy 
            -  FOIA 
            -  Environmental Policy 
            -  Scientific Integrity 
            -  Information Quality Standards 
            -  Commerce.gov 
            -  Science.gov 
            -  USA.gov 
            -  Vote.gov