Article: Voting machine test lab merger despite EAC ban on Ciber puts Wyle lab partnership in question

The efforts of the Election Assistance Commission to accredit test laboratories for the nation's electronic voting machines have left the country with only two labs, SysTest and Wyle, operating on interim approval; and one laboratory, Ciber, left unaccredited since the National Association of State Election Directors got out of the certification business last year.

Published reports indicate the Ciber lab was denied interim accreditation last summer for a history of inadequate quality assurance and inability to document that critical tests were performed. The EAC is saying little about the matter to the media and has now been requested by Senator Diane Feinstein to explain why Ciber was not accredited and why disclosure of that fact was kept from election officials around the nation.

EAC regulatory staff might just want to peek at Ciber's website where they will discover that the banned Ciber lab has merged its testing division with EAC approved Wyle lab. Ciber boasts, "The CIBER-Wyle team is your single source for independent voting machine testing."

"With the growing demand for premier independent software/hardware testing of Voting Machines, CIBER and Wyle have joined forces are now offering the quality independent testing solutions needed for voting machine systems supporting the Election Assistance Commission standards."

"Our teams, co-located in Huntsville, Alabama, have now integrated best of breed testing solutions, CIBER for software testing and Wyle for their hardware testing capabilities. By teaming we now offer complete independent voting system testing solutions for voting system vendors and for state governments."

"We combined the two most experienced labs and staffs in the country into one efficient organization. We provide a co-located testing facility on one campus for all your testing needs. Successfully tested and recommended for certification the industry leaders in voting systems. Specialized support for prequalification testing and anomaly resolution/verification."

The Ciber website also has a pitch for state business as well as electronic voting machines vendors but they should have used a grammar check. "The CIBER-Wyle team will help you to make sure that your election is run with little or no room for criticism. They will assist in areas such as assuring that you have the current certified copy of your voting vendor's hardware and software and that you will have implemented a set of state voting standards that will meet the [sic] with the majority of the voters' approval, taking into consideration the usability and accessibility of the voting system."

Ciber's role in testing of voting technology was more than issuing reports to vendors and states, like Florida, which rely upon Ciber reports for their technology advice to local election officials. Despite the growing number of reports about inadequate testing, now leaking out about Ciber's failures, which reveal long-standing problems of deficiency, the test lab also serviced the Department of Defense.

Ciber's self-promotional web page about the Federal Voting Assistance Program provides Senator Feinstein with new areas needing review for sloppy work on the voting system that assists military voters.

"The scope of the work included testing and validation of both the system's functionality and security....based on our certification as an Independent Test Authority, CIBER was awarded this work....Ciber performed system security penetration assessments....Based on this work, CIBER documented system exposures and vulnerabilities. Periodic penetration assessment continued during system operation."

The merger of the two "independent" test labs into one team raises red flags about Wyle's interim EAC accreditation status; while Ciber's voting security testing for the Defense Department, based on its earlier NASED certification, may soon be getting review by Congress.

[Permission granted to reprint]