,i  #aag? ,,congress  #a/ ,session  ,h4 
,r4 #eceh  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,septemb] #bd1        
#bjba,mr4 ,bacon introduc$ ! foll[+     
bill2 :i* 0 ref]r$ to ! ,committee on   
,h\se ,adm9i/ration1 & 9 addition to !  
,committee on ,homel& ,security1 = a    
p]iod to be subsequ5tly det]m9$ by !    
,speak]1 9 ea* case = consid]ation ( su*
 provisions z fall )9 ! jurisdiction ( !
 committee conc]n$  ,a ,,bill  ,to      
direct ! ,secret>y ( ,homel& ,security  
to e/abli% an election rese>* program to
 te/ ! security ( election sy/ems1 & =  
o!r purposes4  #a4 ,election rese>*     
program  7a7 ,9 g5]al ,subtitle ,a (    
title ,,xxii ( ! ,homel& ,security ,act 
( #bjjb 7#f ,u4,s4,c4 #fea et seq47 is  
am5d$ by add+ at ! end ! foll[+ new     
section3  #bbah4 ,election rese>*       
program  7a7 ,e/abli%m5t ( election     
rese>* program  7#a7 ,9 g5]al ,n lat]   
?an #ahj days aft] ! date ( ! enactm5t (
 ?is section1 ! ,secret>y1 9 coord9ation
 ) ! heads ( election s]vice provid]s1  

%all e/abli% & adm9i/] an election      
rese>* program to te/ ea* election sy/em
 provid$ by ea* election s]vice provid] 
7"u fair1 reasonable1 & nondiscrim9atory
 t]ms7 on behalf ( an election ag5cy to 
id5tify pot5tially vuln]able in=mation4 
7#b7 ,te/+ ,9 c>ry+ out ! program       
requir$ "u p>agraph 7#a71 qualifi$      
indep5d5t security rese>*]s %all apply !
 me?odology develop$ pursuant to        
p>agraph 7#c7 to ea* election sy/em     
provid$ pursuant to p>agraph 7#a7 to    
id5tify pot5tially vuln]able in=mation4 
7#c7 ,me?odology ,! ,secret>y1 9        
consultation ) ! ,director1 %all develop
 a me?odology to be us$ by indep5d5t    
security rese>*]s to te/ ea* election   
sy/em provid$ by ea* election solution  
provid] to id5tify pot5tially vuln]able 
in=mation4  7#d7 ,qualifications =      
qualifi$ indep5d5t rese>*] ,! ,secret>y1
 9 consultation ) ! ,director ( !       
,cyb]security & ,infra/ructure ,security
 ,ag5cy1 %all e/abli% ! qualifications =
 ! indep5d5t security rese>*]s ref]r$ to

 9 subsection p>agraph 7#c74  7b7       
,coord9at$ vuln]ability disclosure      
guidel9es ,n lat] ?an #ahj days aft] !  
date ( ! enactm5t ( ?is section1 !      
,secret>y1 9 consultation ) !           
,commission]s ( ! ,election ,assi/ance  
,commission1 cyb]security rese>*]s1 &   
cov]$ indu/ry exp]ts1 %all e/abli%      
policies & proc$ures = ! process+ &     
resolution ( pot5tially vuln]able       
in=mation relat+ to an election sy/em1  
to ! ext5t practicable1 align$ ) ,/&>ds 
#biadg & #cjaaa ( ! ,int]national ,/&>ds
 ,organization1 includ+-- 7#a7 processes
 = an election s]vice provid] to-- 7,a7 
receive in=mation relat+ to pot5tially  
vuln]able in=mation relat+ to an        
election sy/em2 &  7,b7 dissem9ate      
resolution in=mation relat+ to          
pot5tially vuln]able in=mation relat+ to
 an election sy/em2 &  7#b7 guidance1   
su* z ! ,guide to ,vuln]ability ,report+
 = ,am]ica's ,election ,adm9i/rators1 ) 
respect to ! in=mation items to be      
produc$ ?r\gh ! implem5tation ( !       

vuln]ability disclosure process ( !     
election s]vice provid]4  7c7           
,def9itions ,9 ?is section3 7#a7 ,cov]$ 
field ,! t]m cov]$ field means comput]  
sci5ce1 eng9e]+1 in=mation sci5ce1      
in=mation sy/ems managem5t1 ma!matics1  
op]ations rese>*1 /ati/ics1 or te*nology
 managem5t4  7#b7 ,cov]$ indu/ry exp]t  
,! t]m cov]$ indu/ry exp]t means an     
individual :o has-- 7,a7 successfully   
complet$ #b full ye>s ( progressively   
high] level graduate education lead+ to 
a ,ma/]'s or equival5t graduate degree f
 an accr$it$ in/itution ( high]         
education 7giv5 ! mean+ ( su* t]m 9     
section #aja ( ! ,high] ,education ,act 
( #aife 7#bj ,u4,s4,c4 #ajja77 9 a cov]$
 field2 or  7,b7 a degree t requires at 
lea/ #bd seme/] h\rs 9 a cov]$ field    
requir$ ! developm5t or adaptation (    
applications1 sy/ems or networks4  7#c7 
,director ,! t]m ,director means !      
,director ( ! ,national ,in/itute (     
,/&>ds & ,te*nology4  7#d7 ,election    
ag5cy ,! t]m election ag5cy means !     

,f$]al ,election ,commission4  7#e7     
,election s]vice provid] ,! t]m cov]$   
election s]vice provid] means a private 
sector entity :i* develops1             
manufactures1 sells1 &_/or implem5ts &  
ma9ta9s te*nology t enables !           
adm9i/ration ( elections4 ,includ+ b n  
limit$ to1 vot+ sy/ems1 electronic      
pollbooks1 election managem5t sy/ems1 & 
vot] regi/ration sy/ems4  7#f7 ,election
 sy/em ,! t]m election sy/em means--    
7,a7 ! total comb9ation ( me*anical1    
electrome*anical1 or electronic equipm5t
 7includ+ ! s(tw>e1 firmw>e1 &          
docum5tation requir$ to program1        
control1 & support ! equipm5t7 t is us$ 
to-- 7i7 def9e ballots2  7ii7 ca/ & c\nt
 votes2  7iii7 report or display        
election results2 &  7iv7 ma9ta9 &      
produce any audit trail in=mation2 &    
7,b7 ! practices & associat$            
docum5tation us$ to-- 7i7 id5tify sy/em 
compon5ts & v]sions ( su* compon5ts2    
7ii7 te/ ! sy/em dur+ its developm5t &  
ma9t5ance2  7iii7 ma9ta9 records ( sy/em

 errors & defects2  7iv7 det]m9e        
specific sy/em *anges to be made to a   
sy/em aft] ! initial qualification ( !  
sy/em2 &  7v7 make available any        
mat]ials to ! vot] 7su* z notices1      
in/ructions1 =ms1 or pap] ballots74     
7#g7 ,pot5tially vuln]able in=mation ,! 
t]m pot5tial vuln]ability in=mation     
means a flaw 9 code or design t creates 
a pot5tial po9t ( security compromise = 
an endpo9t or network4  4  7b7 ,cl]ical 
am5dm5t ,! table ( cont5ts 9 section    
#a7;b7 ( ! ,homel& ,security ,act (     
#bjjb is am5d$ by ins]t+ aft] ! item    
relat+ to section #bbag ! foll[+ new    
item3  #bbah4 ,election rese>* program4 
4