Preview only show first 10 pages with watermark. For full document please download

Secretary Of State Report

   EMBED


Share

Transcript

Office of the Secretary of State Report on ES&S Voting System Comprised of EVS Software 5.0.0.0, Combined with Model DS200 and Model DS850 Tabulators Overview: Election Systems and Software (ES&S) applied to the State of New Mexico for certification of its EVS software, to be operated in conjunction with ES&S's newer generation of optical scan tabulators, the DS200 and the DS850. The EVS software does not accommodate New Mexico's existing inventory of voting systems, the M100’s and the M650’s. At the meeting of the Voting System Certification Committee (VSCC) held on June 24, 2013, the VSCC acknowledged receipt of the reports from the Federal Election Assistance Commission (EAC), which demonstrate that EVS, combined with the DS200 tabulators and the DS850 tabulators, meets the most recent Voluntary Voting System Guidelines (VVSG) issued by the EAC, as required by NMSA 1978, § 1-9-14(A). The VSCC has determined that the independent testing conducted through the EAC meets the requirement for independent testing set forth in NMSA 1978, § 1-9-14(B). Those reports are posted on the Secretary of State's website. Additionally, the VSCC has been provided with all technical specifications, operating manuals and training manuals submitted by the vendor for these products. The following report provides information for the VSCC's consideration as to whether the ES&S EVS software, in combination with ES&S's DS200 and DS850 optical scan tabulators, conforms to the New Mexico Election Code, as required by NMSA 1978, § 1-9-14(A). 1-9-7.7. Voting systems; technical requirements. New Mexico Requirement: Have a unique embedded internal serial number for audit purposes. Relationship to 2005 VVSG: This New Mexico requirement conforms to 2005 VVSG, 4.3.6 Product Marking, which requires that "All voting systems shall: a. Identify all devices by means of a permanently affixed nameplate or label containing the name of the manufacturer or vendor, the name of the device, its part or model number, its revision letter, its serial number, and if applicable, its power requirements. 1 | EVS 5.0.0.0 Response: The DS200 and DS850 meet this requirement. (Please refer to the EVS 5.0.0.0 Voting System Testing Lab (VSTL) Report). New Mexico Requirement: Be supplied with a dust-and-moisture-proof cover for transportation and storage purposes. Relationship to 2005 VVSG: This specific requirement is not contained in the 2005 VVSG. The Guidelines provide, in § 4.2.3 that voting systems shall "be capable of using, or be provided with, a protective enclosure rendering the equipment capable of withstanding (1) impact, shock and vibration loads associated with surface and air transportation, and (2) stacking loads associated with storage." Response: The DS200 and DS850 meet this requirement. (Please refer to the System Operating Procedures for each tabulator). New Mexico Requirement: If the net weight of the system, or aggregate of voting device, is over twenty pounds, it must have self-contained wheels so that the system can be easily rolled by one person on rough pavement and can roll through a standard thirty-inch door frame. Relationship to the 2005 VVSG: This requirement is more restrictive that the VVSG, which provides in § 4.2.2 "There is no numerical limitation on the weight of any voting equipment, but the weight of each voting machine should be compatible with its intended use and the location at which the equipment is to be used.” Response: The DS200 and DS850 meet this requirement. (Please refer to the System Operating Procedures for each tabulator). The M650 cart has wheels. Both are designed to be easily moved and fit through a 30 inch door. The DS200 offers two ballot bin combinations. The DS200 plastic ballot bin is a configured twopiece unit where a poll worker places the DS200’s carrying case directly on top of a secure ballot bin to configure the system for voting. On the other hand, the DS200 metal ballot bin contains two independent ballot compartments for separating counted ballots and ballots including write-in votes. Both combinations include locking wheels. The weight of the DS200 is about 25 pounds. The weight of the carrying case is about 10 pounds. The weight of the plastic ballot box is 37 pounds. The weight of the metal ballot box without a ballot diverter is 103 pounds. The weight of the metal ballot box with a diverter is 107 pounds. New Mexico Requirement: Be a stand-alone, non-networked election system such that all preelection, Election Day and post-election events and activities can be recorded and retained in each device. Relationship to the 2005 VVSG: Section 7.9.4 of the VVSG provides that "the printer shall not be permitted to communicate with any system or machine other than the voting machine to 2 | EVS 5.0.0.0 which it is connected. The printer shall only be able to function as a printer; it shall not contain any other services (e.g., provide copier or fax functions) or network capability.” Response: EVS 5.0.0.0 software is configured in the stand-alone configuration and the DS200 and DS850 are stand-alone tabulators, such that all events and activities are recorded on the removable storage media resident on the tabulator. (Please refer to System Overview). New Mexico Requirement: Employ scalable technology allowing easy enhancements that meet United States Election Assistance Commission standards and state law. Relationship to the 2005 VVSG: This requirement is not specifically found in the VVSG. Response: EVS 5.0.0.0 software and tabulators meet this requirement. EVS provides a scalable, end-to-end election system for jurisdictions with widely varied requirements. (Please refer to the EVS 5.0.0.0 VSTL Test Report and EVS System Overview). New Mexico Requirement: Have ancillary equipment, such as printers, power sources, microprocessors and switch and indicator matrices, that are installed internally or are modular and transportable. Relationship to the 2005 VVSG: This requirement is not specifically found in the VVSG. Response: The DS200 and DS850 meet this requirement. (Please refer to the System Overview). The DS850 includes the following components:      Tabulator DS850 Table Uninterruptable Power Supply Report Printer Audit Printer The DS200 includes a 12-inch touch screen, providing voter and poll worker feedback, an internal thermal printer for generating machine totals and log reports, and a USB thumb drive for loading the election definitions and storing results. New Mexico Requirement: Display publicly the number of ballots processed. Relationship to 2005 VVSG: The 2005 VVSG, § 2.1.8 Ballot Counter, requires: For all voting systems, each piece of voting equipment that tabulates ballots shall provide a counter that: 3 | EVS 5.0.0.0 a. Can be set to zero before any ballots are submitted for tally; b. Records the number of ballots cast during a particular test cycle or election; c. Increases the count only by the input of a ballot; d. Prevents or disables the resetting of the counter by any person other than authorized persons at authorized points; e. Is visible to designated election officials. The DS200 and DS850 meet this requirement. (Please refer to the System Operating Procedures for each tabulator as well as the VSTL report). New Mexico Requirement: Be able to print: (1) an alphanumeric printout of the contests, candidates and vote totals when the polls are opened so that the poll workers can verify that the counters for each candidate are on zero. Relationship to 2005 VVSG: The 2005 VVSG, § 5.4.3 In-process Audit Records, requires: "Critical system status messages other than informational messages displayed by the system during the course of normal operations. These items include, but are not limited to: ii. The “zero totals” check conducted before opening the polling place or counting a precinct centrally." Response: The DS200 System Operating Manual gives instruction on how to print zero tape. "Press Zero Report to reprint your zero report". The DS850 manual states that the Zero Report, which is printed before polls are open on Election Day, is used to indicate no tampering has been done to the vote totals. New Mexico Requirement: An alphanumeric printout of the contests, candidates and vote totals at the close of the polls, which printouts shall contain the system serial number and public counter total. Relationship to the 2005 VVSG: The 2005 VVSG, § 5.4.4 Vote Tally Data, provides that voting systems shall meet these reporting requirements by providing software capable of obtaining data concerning various aspects of vote counting and producing printed reports. At a minimum, vote tally data shall include: a. Number of ballots cast, using each ballot configuration, by tabulator, by precinct, and by political subdivision; b. Candidate and measure vote totals for each contest, by tabulator; c. The number of ballots read within each precinct and for additional jurisdictional levels, by configuration, including separate totals for each party in primary elections; 4 | EVS 5.0.0.0 d. Separate accumulation of overvotes and undervotes for each contest, by tabulator, precinct and for additional jurisdictional levels (no overvotes would be indicated for DRE voting devices); e. For paper-based systems only, the total number of ballots both able to be processed and unable to be processed; and if there are multiple card ballots, the total number of cards read. For systems that produce an electronic file containing vote tally data, the contents of the file shall include the same minimum data cited above for printed vote tally reports. Response: The DS200 and DS850 meet the above requirements. (Please refer to the System Operating Procedures for each tabulator and the VSTL report). New Mexico Requirement: As many copies of the alphanumeric printouts as necessary to satisfy state law. Relationship to the 2005 VVSG: This requirement is specific to state law and expressly stated in the 2005 VVSG. Response: The DS200 and DS850 meet the above requirements. (Please refer to the System Operating Procedures for each tabulator). DS200 and DS850 operating manuals give instruction on multiple print outs. These systems meet these requirements. Each has the capability to produce as many zero reports and results reports necessary to satisfy state law. New Mexico Requirement: Include a feature to allow reports to be sent to an electronic data file. Relationship to 2005 VVSG: The 2005 VVSG, Section 4.1.7.1, provides, "in voting systems that use storage media that can be removed from the system and transported to another location for readout and report generation, these media shall use devices with demonstrated error-free retention for a period of 22 months under the environmental conditions for operation and nonoperation contained in Subsection 4.1.2.” Response: EVS 5.0.0.0 meets this requirement. (Please refer to Election Reporting Module (ERM) System Operating Procedures). 1-9-7.8. Voting systems; operational requirements. 5 | EVS 5.0.0.0 New Mexico Requirement: Have internal application software that is specifically designed and engineered for the election application. Relationship to 2005 VVSG: This requirement is not specifically found in the 2005 VVSG. The VVSG provides: "7.4.4 Software Distribution, the vendor shall document all software including voting system software, third party software (such as operating systems and drivers) to be installed on the certified voting system, and installation programs. The documentation shall have a unique identifier (such as a serial number or part number) for the following set of information: documentation, software vendor name, product name, version, the certification application number of the voting system, file names and paths or other location information (such as storage addresses) of the software.” Response: EVS 5.0.0.0 software and tabulators are designed specifically for elections and meet this requirement. (Please refer to System Overview). New Mexico Requirement: Include comprehensive diagnostics designed to ensure that failures do not go undetected. Relationship to the 2005 VVSG: Section 2.1.4 of the 2005 VVSG, provides: To ensure system integrity, all systems shall: j. Include built-in measurement, self-test, and diagnostic software and hardware for detecting and reporting the system's status and degree of operability. Response: EVS 5.0.0.0 software and tabulators have audit logs and meet this requirement. (Please refer to System Operating Procedures). For the DS200, Press Event Log Report to print an audit log of the activity that has occurred on the scanner. Information such as the date and times when the system is initialized and when it prints reports appears on this report. The DS850 records errors and major events and tags these incidents with the date and time the incident occurred based on the DS850’s real‐time clock settings. Audit log information can be exported to a USB flash drive inserted into a USB port on the DS850. (Also gives picture of menu screen). New Mexico Requirement: Have a real-time clock capable of recording and documenting the total time polls are opened. Relationship to the VVSG: The 2005 VVSG, § 2.1.5.1, requires "All systems shall include a realtime clock as part of the system’s hardware. The system shall maintain an absolute record of 6 | EVS 5.0.0.0 the time and date or a record relative to some event whose time and data are known and recorded." Response: The DS200 tabulators have a real-time clock and meet this requirement. The DS850 has real-time audit logs. (Please refer to System Operating Procedures). The DS200 prints an audit log of the activity that has occurred on the scanner. Information such as the date and times when the system is initialized and when it prints reports appears on this report. The DS850 records errors and major events and tags these incidents with the date and time the incident occurred based on the DS850’s real‐time clock settings. Audit log information can be exported to a USB flash drive inserted into a USB port on the DS850. New Mexico Requirement: Have a self-contained, internal backup battery that powers all components of the system that are powered by alternating current power; and, in the event of a power outage in the polling place: (1) the self-contained, internal backup battery power shall engage with no disruption of operation for at least two hours and with no loss of data. Relationship to the 2005 VVSG: Section 4.1.2.4 of the 2005 VVSG provides: All voting machines shall also be capable of operating for a period of at least 2 hours on backup power, such that no voting data is lost or corrupted nor normal operations interrupted. When backup power is exhausted the voting machine shall retain the contents of all memories intact. Response: The DS200 contains an external DC power supply, which plugs into a standard 120‐ volt AC outlet, supplies power to the scanner. If a power outage occurs, the DS200 contains an internal back‐up battery that can run the scanner for a minimum of two hours, depending on scanner activity. The DS850 - To ensure 2 hours of uninterruptible power, election officials must use an Uninterruptible Power Supply (UPS) with the DS850. This will provide continuous power to the machine and to prevent the DS850 and the attached printers from being damaged in case of a power surge. New Mexico Requirement: The system shall maintain all vote totals, public counter totals and the internal clock time in the event that the main power and battery backup power fail. Relationship to the 2005 VVSG: Section 4.1.2.4 of the 2005 VVSG provides: All voting machines shall also be capable of operating for a period of at least 2 hours on backup power, such that no 7 | EVS 5.0.0.0 voting data is lost or corrupted nor normal operations interrupted. When backup power is exhausted the voting machine shall retain the contents of all memories intact. Response: All tabulators have backup batteries tested to maintain at least two hours of operation and meet the above requirements. (Please refer to System Operating Procedures for each tabulator). The DS200 uses a USB flash drive to store the scanner’s election definition, audit log and other election‐specific information. Data on the USB flash drive is updated each time the DS200 scans a ballot. The USB flash drive maintains all vote totals, public counter totals, and internal clock time in the event of a complete power failure. The DS850 records errors and major events and tags these incidents with the date and time the incident occurred based on the DS850’s real‐time clock settings. Audit log information can be exported to a USB flash drive inserted into a USB port on the DS850. 1-9-7.9. Voting systems; memory; removable storage media device; requirements. New Mexico Requirement: Be programmable with removable storage media devices. Relationship to the 2005 VVSG: Section 4.1.7.1 Removable Storage Media provides: "in voting systems that use storage media that can be removed from the system and transported to another location for readout and report generation, these media shall use devices with demonstrated error-free retention for a period of 22 months under the environmental conditions for operation and non-operation contained in Subsection 4.1.2. Examples of removable storage media include: programmable read-only memory (PROM), random access memory (RAM) with battery backup, magnetic media or optical media." Response: All tabulators meet the above requirements. (Please refer to System Operating Procedures for each tabulator). The DS200 stores election results on a removable USB flash drive that is used to transfer scanner results to Election Reporting Manager after the polls close. The DS850 allows for the use of a removable USB flash drive to transfer scanner results. New Mexico Requirement: Contain ballot control information, summary vote totals, maintenance logs and operator logs on the removable storage media device. Response: All tabulators meet the above requirements. (Please refer to System Operating Procedures for each tabulator). 8 | EVS 5.0.0.0 The removable media storage devices described above all contain ballot control information, summary vote totals, maintenance logs and operator logs. New Mexico Requirement: Ensure that the votes stored on the removable storage media device accurately represent the actual votes cast. Relationship to the 2005 VVSG: Section 2.1.2 Accuracy, requires: Memory hardware, such as semiconductor devices and magnetic storage media, must be accurate. The design of equipment in all voting systems shall provide for the highest possible levels of protection against mechanical, thermal, and electromagnetic stresses that impact system accuracy. Section 4 provides additional information on susceptibility requirements. To ensure vote accuracy, all systems shall: a. Record the election contests, candidates, and issues exactly as defined by election officials; b. Record the appropriate options for casting and recording votes; c. Record each vote precisely as indicated by the voter and produce an accurate report of all votes cast; d. Include control logic and data processing methods incorporating parity and checksums (or equivalent error detection and correction methods) to demonstrate that the system has been designed for accuracy; e. provide software that monitors the overall quality of data read-write and transfer quality status, checking the number and types of errors that occur in any of the relevant operations on data and how they were corrected. Response: All tabulators meet the above requirements. (Please refer to System Operating Procedures for each tabulator and the VSTL test report). New Mexico Requirement: Be designed so that no executable code can be launched from random access memory. Relationship to the 2005 VVSG: Section 5.2.2 Software Integrity provides: "Self-modifying, dynamically loaded or interpreted code is prohibited, except under the security provisions outlined in Subsection 7.4.? This prohibition is to ensure that the software tested and approved during the certification process remains unchanged and retains its integrity. External modification of code during execution shall be prohibited. Where the development environment (programming language and development tools) includes the following features, the software shall provide controls to prevent accidental or deliberate attempts to replace executable code: 9 | EVS 5.0.0.0 a. Unbounded arrays or strings (includes buffers used to move data); b. Pointer variables; c. Dynamic memory allocation and management”. Response: All tabulators meet this requirement. The data is encrypted and digitally signed. (Please refer to EVS 5.0.0.0 Test Report). New Mexico Requirement: Have any operating system software stored in nonvolatile memory, which shall include internal quality checks such as parity or error detection and correction codes, and which software shall include comprehensive diagnostics to ensure that failures do not go undetected. Relationship to the 2005 VVSG: Section 2.1.4 of the 2005 VVSG, provides: “To ensure system integrity, all systems shall: j. Include built-in measurement, self-test, and diagnostic software and hardware for detecting and reporting the system's status and degree of operability.” Response: The operating system for the tabulators is stored in non-volatile memory on each unit and meets this requirement. Each unit undergoes an integrity check when turned on. (Please refer to EVS 5.0.0.0 VSTL Test Report). New Mexico Requirement: Allow for pre-election testing of the ballot control logic and accuracy, with results stored in the memory that is used on Election Day, and shall be capable of printing a zero-results printout prior to these tests and a results printout after the test. Relationship to the 2005 VVSG: Voting systems must provide for logic and accuracy testing, which is defined as: logic and accuracy testing: Testing of the tabulator setups of a new election definition to ensure that the content correctly reflects the election being held (i.e., contests, candidates, number to be elected, ballot styles) and that all voting positions can be voted for the maximum number of eligible candidates and that results are accurately tabulated and reported. Response: EVS 5.0.0.0 software and the tabulators meet this requirement. (Please refer to System Operating Procedures). The EVS System Operating Procedures provide instruction on pre-election preparation, including logic and accuracy testing, and instructs operators to use a test deck to ensure that election definitions are accurate. New Mexico Requirement: Have internal audit trail capability such that all pre-election, election day and post-election events shall be stored, recorded and recovered in an easy-toread printed form and be retained within memory that does not require external power for memory retention. 10 | EVS 5.0.0.0 Relationship to 2005 VVSG: Section 2.1.5.1 of the 2005 VVSG provides: Audit records shall be prepared for all phases of election operations performed using devices controlled by the jurisdiction or its contractors. These records rely upon automated audit data acquisition and machine-generated reports, with manual input of some information. These records shall address the ballot preparation and election definition phase, system readiness tests, and voting and ballot-counting operations. The software shall activate the logging and reporting of audit data as described below.” Response: EVS 5.0.0.0 software and tabulators have audit logs which can be printed and exported and meet this requirement. (Please refer to System Operating Procedures). As shown above, the audit log lists all of the tabulator events that occur from the time the election definition PC card is loaded into the tabulator until the time it is removed. This information is retained in memory in the event of a complete power failure. The audit logs are stored and recorded on the removable storage media, and can be recovered and printed from that media. The DS200 uses a USB flash drive to store the scanner’s election definition, audit log and other election‐specific information. Data on the USB flash drive are updated each time the DS200 scans a ballot. Use USB flash drives with a memory capacity of 1 to 8 GB. The DS850 records errors and major events and tags these incidents with the date and time the incident occurred based on the DS850’s real‐time clock settings. Audit log information can be exported to a USB flash drive inserted into a USB port on the DS850. New Mexico Requirement: Possess the capability of remote transmission of election results to a central location only by reading the removable storage media devices once they have been removed from the tabulation device after the poll closing sequence has been completed. Relationship to the 2005 VVSG: As set forth above, the 2005 VVSG does not require that all certified voting systems use removable storage media devices. Response: The EVS 5.0.0.0 system meets this requirement. (Please refer to System Operating Procedures). Officials who tabulate ballots on central scanners such as the ES&S Model 850 save scanner results to USB memory storage devices. An election official loads totals from the USB memory devices into ERM and produces election reports while election workers continue to scan ballots. ERM generates a final election report after an election official loads the last USB memory device into the central count computer. 11 | EVS 5.0.0.0 Jurisdictions that use precinct tabulators such as the DS200, collect vote data at polling places and physically transfer scanner memory devices to a central count location or transmit results to the central count site. Election workers physically load ballot data from the scanner into ERM from memory storage devices (USB flash drives). Precinct count jurisdictions use ERM to combine election results from all of your jurisdiction’s scanners to produce election reports. ERM generates a final election report after officials transfer all precinct scanner data to the central count computer. New Mexico Requirement: Prevent data from being altered or destroyed by report generation or by the transmission of results. Relationship to the 2005 VVSG: Section 2.4.3 Producing Reports, provides: "All systems shall be able to create reports summarizing the vote data on multiple levels. All systems shall provide capabilities to.... (g) prevent data from being altered or destroyed by report generation, or by the transmission of results over telecommunications lines.” Response: Report generation and transmission of results does not affect data. (Please refer to EVS 5.0.0.0 VSTL Test Report). 1-9-7.10. Voting systems; ballot handling and processing requirements. New Mexico Requirement: Accept a ballot that is a minimum of six inches wide and a maximum of twenty-four inches long, in dual columns and printed on both sides. Relationship to 2005 VVSG: This requirement is not found in the 2005 VVSG. Response: The VSTL Report shows that DS200 and DS850 were tested to accept ballot sizes up to 19 inches with up to 720 ballot positions. New Mexico Requirement: Accept a ballot in any orientation when inserted by a voter. Relationship to 2005 VVSG: The 2005 VVSG do not contain this requirement. Response: The precinct level tabulators, DS200, can scan ballots inserted in any direction or orientation by the voter. The M650 and DS850 do not involve ballots inserted by a voter, but the DS850 allows ballots to be inserted in any orientation. New Mexico Requirement: Have the capability to reject a ballot on which a voter has made more than the allowable number of selections in any contest. 12 | EVS 5.0.0.0 Relationship to the 2005 VVSG: Section 2.3.3.2 Paper-based System Requirements provides that all paper-based systems shall: 1. Provide feedback to the voter that identifies specific contests for which he or she has made no selection or fewer than the allowable number of selections (e.g., undervotes); 2. Notify the voter if he or she has made more than the allowable number of selections for any contest (e.g., overvotes); 3. Notify the voter before the ballot is cast and counted of the effect of making more than the allowable number of selections for a contest; 4. Provide the voter opportunity to correct the ballot for either an undervote or overvote before the ballot is cast and counted. Response: The DS200 will use one of the following methods for accepting or rejecting blank ballots, overvotes and undervotes:    Unconditional acceptance: The scanner accepts and tabulates results for all ballots. Any contests that are blank, overvoted or undervoted will be logged as such and the remaining contests will be tabulated appropriately. Unconditional rejection: The DS200 automatically rejects undervoted, overvoted or blank ballots. Voters must review and correct ballot selections before the scanner will accept the ballot. Query the voter for correction: The DS200 returns a questioned ballot to the voter and displays a screen message that describes the problem and prompts the voter to either review and edit the ballot or cast the ballot as it is. The voter presses Don’t Cast ‐ Return Ballot to correct the ballot or presses Cast Ballot to cast the ballot without editing selections. Once ACCEPT is pressed, the message Thank you for voting. Your ballot has been counted appears. DS850: The Sort Settings option allows the election official to specify whether ballots with write‐ins are to be processed and into which output bin they are to be diverted. It also allows the official to specify whether undervotes, overvotes, crossovers, blank ballots, and ballots with unclear marks are to be processed. New Mexico Requirement: Be designed to accommodate the maximum number of ballot styles or ballot variations encountered in the largest New Mexico election jurisdiction. Relationship to 2005 VVSG: This requirement is state-specific and not found the 2005 VVSG. New Mexico Requirement: Be able to read a single ballot with at least four hundred twenty voting positions. Relationship to 2005 VVSG: Section 2.2.1.1 General Capabilities, 13 | EVS 5.0.0.0 “All systems shall provide the general capabilities for ballot preparation. All systems shall be capable of... supporting the maximum number of potentially active voting positions as indicated in the system documentation.” Response: The VSTL report shows that DS200 and DS850 were tested to accept up to a 19 inch ballot with 720 ballot positions on a single ballot. Tabulators: Expected Speed Maximum Speed Throughput Capacity Max Ballot Styles Processing Frequency DS200 Estimated maximum throughput in a real world environment – where mismarked, torn or folded ballots are occasionally rejected – to be between 2 and 3 voters per minute, which adds up to approximately 2300 ballots per terminal over the course of a 15-hour counting period. Maximum throughput in a test environment with a single user feeding ballots into the machine with no rejections is an average of 2.5 ballots per minute. This rate computes to 153 ballots per hour or a maximum of 2300 ballots for a 15-hour day. The DS200 ballot box holds up to 2800 paper ballots. Supported USB Flash Drives for the DS200 start at 512 MB, with larger sizes available. The number of ballot records that can be stored to Flash media depend on the capacity of the Flash drive and size of the loaded election. 18 precincts per DS200, 40 styles per precinct 20 seconds per voter DS850 DS850 can divert sorted ballots to bins without pausing operation. The input hopper holds up to 480 standard ballots and scans approximately 365 11-inch ballots per minute. Approximately 365 11-inch ballots per minute. Throughput rate decreases with increased ballot lengths. The ES&S DS850 input hopper and main output hopper each hold up to 480 standard sized ballots. Each outstack bin holds approximately 150 ballots. The DS850 is equipped with a 1TB hard drive that can hold more than 5 million ballot images and related data. 9990 precincts, 40 ballot styles per precinct in a ballots by style election Between 5 and 6 ballots per second depending on ballot length. ES&S AutoMARK Expected real-world ballot marking speed is 1.5 minutes for a sighted voter and 2.5 minutes for a voter with low or no vision. Maximum ballot marking throughput speed in test mode is estimated at 2.5 minutes per ballot (filling all positions). Does not apply. The AutoMARK marks a single ballot at a time. The system does not store or process vote totals and has no memory capacity limitations once programmed with an election definition. 6400 1-20 minutes per voter. Estimated average at 8 ballots per hour at maximum capacity. 1-9-7.11. Voting systems; source code; escrow. 14 | EVS 5.0.0.0 New Mexico Requirement: As a condition of initial certification and continued certification, the source code that operates a voting system shall be placed in escrow and be accessible to the State of New Mexico in the event the manufacturer ceases to do business or ceases to support the voting system. Response: The vendor has committed to placing the source code in escrow upon certification. 15 | EVS 5.0.0.0