E-voting must stop, warns U.K. Electoral Commission
Strong words across the pond
Computerworld UK - The U.K. Electoral Commission has called for a halt to electronic voting unless major changes are made to the way the voting systems are implemented and secured.
The watchdog agency has issued a series of reports on pilot projects commissioned by the Ministry of Justice that allowed internet and telephone voting in some areas of England in last May's local elections. A second set of reports examined electronic counting pilots.
A report by independent observers from the Open Rights Group, published in June, painted a grim picture of crashed computers and concerns about the systems' security and reliability.
The group's concerns are echoed in the new reports.
E-voting "should not be pursued any further without significant improvements to testing and implementation and a system of individual voter registration", the commission said.
Although remote voting systems had "in broad terms" proved successful and facilitated voting, "the level of implementation and security risk involved was significant and unacceptable," the commission found.
It also found that there had been "insufficient time available to implement and plan the pilots, and the quality assurance and testing was undertaken too late and lacked sufficient depth."
Limited testing and planning were also to blame for problems with e-counting pilots that saw the electronic count abandoned in favor of a manual count in three out of five test areas. Electronic counting in the other two pilot areas "was completed although it was slower than expected and difficulties were reported," the commission said.
Best practices learned on previous occasions "were not taken into account" in the May pilots, the commission noted.
"The experiences of 2007 have once again highlighted the fact that the implementation needs to be carried out in an appropriate fashion," the commission said.
It issued technical reports from analysts Ovum and Actica, highlighting issues that ranged from "enormous variation" in the levels of readiness and fitness for purpose of the systems used to poor configuration.
Actica's report on e-voting warned: "All of the pilots had an unnecessarily high level of risk because the time available to local authorities and suppliers between contract approval and polling day was less than half of what is needed."
Electoral Commission Chief Executive Peter Wardle said, "We have learnt a good deal from pilots over the past few years. But we do not see any merit in continuing with small-scale, piecemeal piloting where similar innovations are explored each year without sufficient planning and implementation time, and in the absence of any clear direction, or likelihood of new insights."
In some of the pilot areas for both e-counting and e-voting, "it was clear that local authority elections staff were supplier-led," the commission warned.
This was often a reflection of authorities "not having the technical knowledge or project management skills", while in other cases, "suppliers did not have sufficient knowledge of UK electoral law and practice".
The commission's analysis of recent Scottish elections -- which were thrown into chaos with results severely delayed by technical problems with electronic counting -- is set to be published in October.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into...
- Identity Governance: The Business Imperatives
- This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make... All Security White Papers
- Live Webcast
Playing Defense: Staying on Top of Your Disaster Recovery Game - When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing...
- Introduction to VMware vCenter Site Recovery Manager 5
- Traditional disaster recovery solutions are often too expensive, complex and unreliable to meet business requirements. As a result, IT departments are hesitant to...
- The Top Ten Secrets to Avoiding SAN Performance Problems
- Maintaining peak performance while simultaneously addressing the root cause of SAN errors is challenging. Learn the most common SAN problems and explore new...
- Deduplication Without Compromise
- Go inside Quantum's scalable, high-performance, multi-protocol new DXi deduplication appliances, designed to make backup much more effective. Discover how the new future-proof DXi6700...
- Director of Disk Products Discusses DXi6700
- Discover how the new DXi 6700 series of deduplication appliances provide investment protection and a future-proof feature set, all while delivering fast, scalable,...
- Playing Defense: Staying on Top of Your Disaster Recovery Game
- When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing... All Security Webcasts