John Sarbanes

“ The record of the State in carrying out the following with respect to the administration of elections for Federal office: “ (A) Providing voting machines that are less than 10 years old. “ (B) Implementing strong chain of custody procedures for the physical security of voting equipment and paper records at all stages of the process. “ (C) Conducting pre-election testing on every voting machine and ensuring that paper ballots are available wherever electronic machines are used. “ (D) Maintaining offline backups of voter registration lists. ”

“ A precise description of the manner in which the ballots are physically stored, including the total number of physical groups of ballots, the numbering system for each group, a unique label for each group, and the number of ballots in each such group. “ (2) The term ‘incorrect outcome’ means an outcome that differs from the outcome that would be determined by a full tabulation of all votes validly cast in the election, determining voter intent manually, directly from voter-verifiable paper records. “ (3) The term ‘outcome’ means the winner of an election, whether a candidate or a position. ”

“ Ability Of Replacement Systems To Administer Ranked Choice Elections.—To the greatest extent practicable, an eligible State which receives a grant to replace a voting system under this section shall ensure that the replacement system is capable of administering a system of ranked choice voting under which each voter shall rank the candidates for the office in the order of the voter’s preference. ”

“ Enhancing the cybersecurity of voter registration systems. “ (b) Qualified Election Infrastructure Vendors Described.— “ (1) IN GENERAL.—For purposes of this part, a ‘qualified election infrastructure vendor’ is any person who provides, supports, or maintains, or who seeks to provide, support, or maintain, election infrastructure on behalf of a State, unit of local government, or election agency (as defined in section 3601 of the Election Security Act) who meets the criteria described in paragraph (2) . ”

“ Any planned and implemented technical measures to respond to and recover from the incident. “ (vi) In the case of any notification which is an update to a prior notification, any additional material information relating to the incident, including technical data, as it becomes available. ”