Skip to main content    

An official website of the United States government

Here’s how you know

**Official websites use .gov**              A **.gov** website belongs to an official government organization in the United States.            

**Secure .gov websites use HTTPS**              A **lock** (  LockA locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.            

https://www.nist.gov/itl/test-assertions-vvsg-10-section-754-august-2015

            -  Topics  -  All Topics 
-  Advanced communications 
-  Artificial intelligence 
-  Bioscience 
-  Buildings and construction 
-  Chemistry 
-  Climate 
-  Cybersecurity 
-  Electronics 
-  Energy 
-  Environment 
-  Fire 
-  Forensic science 
-  Health 
-  Information technology 
-  Infrastructure 
-  Manufacturing 
-  Materials 
-  Mathematics and statistics 
-  Metrology 
-  Nanotechnology 
-  Neutron research 
-  Performance excellence 
-  Physics 
-  Public safety 
-  Resilience 
-  Standards 
-  Transportation 
 
            -  Publications 
            -  Labs & Major Programs  -  Laboratories    -  Communications Technology Laboratory 
  -  Engineering Laboratory 
  -  Information Technology Laboratory 
  -  Material Measurement Laboratory 
  -  Physical Measurement Laboratory 
-  User Facilities    -  NIST Center for Neutron Research 
  -  CNST NanoFab 
-  Research Test Beds 
-  Research Projects 
-  Tools & Instruments 
-  Major Programs    -  Baldrige Performance Excellence Program 
  -  CHIPS for America Initiative 
  -  Manufacturing Extension Partnership (MEP) 
  -  Office of Advanced Manufacturing 
  -  Special Programs Office 
  -  Technology Partnerships Office 
 
            -  Services & Resources  -  Standards and Measurements    -  Calibration Services 
  -  Laboratory Accreditation (NVLAP) 
  -  Quality System 
  -  Standard Reference Materials (SRMs) 
  -  Standards.gov 
  -  Time Services 
  -  Office of Weights and Measures 
-  Software 
-  Data    -  Chemistry WebBook 
  -  National Vulnerability Database 
  -  Physical Reference Data 
  -  Standard Reference Data (SRD) 
-  Storefront 
-  License & Patents 
-  Computer Security Resource Center (CSRC) 
-  NIST Research Library 
 
            -  News & Events  -  News 
-  Events 
-  Blogs 
-  Feature Stories 
-  Awards 
-  Video Gallery 
-  Image Gallery 
-  Media Contacts 
 
            -  About NIST  -  About Us    -  Leadership 
  -  Organization Structure 
  -  Budget & Planning 
-  Contact Us 
-  Visit 
-  Careers    -  Student programs 
-  Work with NIST 
-  History    -  NIST Digital Archives 
  -  NIST Museum 
  -  NIST and the Nobel 
-  Educational Resources 
 

## Information Technology Laboratory

-  About ITL  Expand or Collapse    -  ITL Mission 
  -  ITL Purpose 
  -  ITL History Timeline 
  -  Organizational Chart 
-  How to Work With Us  Expand or Collapse    -  ITL Opportunities 
  -  NRC Postdoctoral Research Fellowships in the ITL 
  -  ITL Grants Program 
  -  NIST SHIP Program 
  -  ITL SURF Program 
  -  Pathways Program 
  -  Educational Outreach 
-  Publications  Expand or Collapse    -  Computer Security Resource Center 
  -  ITL Patent Policy – Inclusion of Patents in ITL Publications 
  -  Federal Information Processing Standards (FIPS) 
  -  NIST Special Publication 800-series General Information 
  -  NIST Special Publication 1800-series General Information 
  -  ITL Bulletins 
  -  ITL Newsletters 
  -  NIST Special Publication 500 Series 
  -  Searchable NIST Publication Database 
-  Priority Areas  Expand or Collapse    -  Artificial Intelligence  Expand or Collapse      -  FARSAIT 
  -  Cybersecurity 
  -  Internet of Things 
  -  Future Computing Technologies and Applications 
  -  Reliable Computing 
-  Products and Services  Expand or Collapse    -  Biometric Special Databases and Software 
  -  Color FERET Database 
  -  Computer Security Resource Center 
  -  Cybersecurity Framework 
  -  EMNIST Dataset 
  -  Healthcare - Standards & Testing 
  -  NIST Digital Library of Mathematical Functions 
  -  NIST/SEMATECH Engineering Statistics Handbook 
  -  National Initiative for Cybersecurity Education 
  -  National Software Reference Library's RDS 
  -  National Vulnerability Database 
  -  Tools for Searching the Coronavirus Dataset 
  -  Voting 
-  Events 
-  News & Updates 
-  Taking Measure Blogs on Information Technology 
-  Cybersecurity Insights Blog 
-  Standards Activities 
-  Videos 

## Connect with us

GovDeliveryTwitter

# Test Assertions for VVSG 1.0 Section 7.5.4, August 2015

## Share

Facebook

Linkedin

Twitter

Email

**Requirement 7.5.4**

**VVSG 1.0 Requirement 7.5.4:**

Ballot recording and vote counting can be performed in either a dedicated or non-dedicated environment. If ballot recording and vote counting operations are performed in an environment that is shared with other data processing functions, both hardware and software features shall be present to protect the integrity of vote counting and of vote data. Systems that use a shared operating environment shall:

a.    Use security procedures and logging records to control access to system functions

b.   Partition or compartmentalize voting system functions from other concurrent functions at least logically, and preferably physically as well

c.    Control system access by means of passwords, and restrict account access to necessary functions only

d.   Have capabilities in place to control the flow of information, precluding data leakage through shared system resources

**Test Assertions**

**TA754-1:**The test assertions in this section SHALL apply even if the system does not implement communications.

**TA754-2:** IF ballot recording and vote counting operations are both performed in an environment that is shared with other data processing functions THEN hardware features SHALL be present to protect the integrity of vote counting and of vote data.

**TA754-2-1**Implementing HW-enforced process isolation features to preserve integrity SHALL be sufficient to satisfy this requirement.

**TA754-3:** IF ballot recording and vote counting operations are both performed in an environment that is shared with other data processing functions THEN software features SHALL be present to protect the integrity of vote counting and of vote data.

**TA754-3-1:** Designing software to use the HW-enforced process isolation features SHALL be sufficient to satisfy this requirement.

**TA754a-1:** IF voting systems use a shared operating environment THEN those systems SHALL use security procedures to control access to system functions.

**TA754a-1-1:**IF voting systems use a shared operating environment THEN those systems SHALL use security procedures to control physical and/or logical access to system functions.

**TA754a-2:**IF voting systems use a shared operating environment THEN those systems SHALL use logging records to record access to system functions.

**TA754a-2-1:**Voting systemsMAY use virtualization technologies.

**TA754b-1:**IF voting systems use a shared operating environment THEN those systems SHALL partition voting system functions OR those systems SHALL compartmentalize voting system functions logically from other concurrent functions.

**TA754b-2:** IF voting systems use a shared operating environment THEN those systems SHOULD also compartmentalize voting system functions physically from other concurrent functions.

**TA754c-1:**IF voting systems use a shared operating environment THEN those systems SHALL restrict election-administration functions to accounts for election officials.

**TA754c-2:**IF voting systems use a shared operating environment THEN those systems SHOULD ensure that election-specific accounts only have privileges necessary to perform election-administration functions.

**TA754c-3:** IF voting systems use a shared operating environment and use password authentication THEN those systems SHALL ensure that election-specific accounts only have privileges necessary to perform election-administration functions.

**TA754c-4:** IF voting systems use a shared operating environment THEN those systems SHALL restrict account access to necessary functions only.

**TA754d-1:**IF voting systems use a shared operating environment THEN those systems SHALL have capabilities in place to control the flow of information to and from shared system resources.

**TA754d-1-1:** Non-voting-related processes and services SHALL NOT have access to memory or storage location used by voting-related processes and services.

Information technologyVoting systems

### HEADQUARTERS

301-975-2000

Webmaster | Contact Us | Our Other Offices

TwitterFacebookLinkedInInstagramYouTubeGiphyRSS FeedMailing List

Feedback

            -  Site Privacy 
            -  Accessibility 
            -  Privacy Program 
            -  Copyrights 
            -  Vulnerability Disclosure 
            -  No Fear Act Policy 
            -  FOIA 
            -  Environmental Policy 
            -  Scientific Integrity 
            -  Information Quality Standards 
            -  Commerce.gov 
            -  Science.gov 
            -  USA.gov 
            -  Vote.gov