OVSTA
Los Angeles County Vsap 3.0 Admin Approval
VSAP Tally Version 3.0
Read the report at Los Angeles County VSAP ↗
30.Within 12 months of the Secretary of State promulgating open-source regulations, Los
Angeles County in partnership with the Secretary of State shall update their plan
previously submitted on October 1, 2021 to make the source code of the VSAP system
available and open.
31. The next version of VSAP submitted to the Secretary of State shall have full disk
encryption implemented completely deployed. If Los Angeles Couty cannot successfully
implement and deploy full disk encryption without documented impact to the system's
accuracy, efficiency, or performance, the Secretary of State reserves the right to require
Los Angeles County to undergo an external independent security audit at Los Angeles
County's expense but procured by the Secretary of State.
32.The County shall apply updates and configuration changes to remediate the findings set
forth in the Consultant's Security and Telecommunications Report within 10 days from the
date of this approval and submit the changes to the Secretary of State for administrative
approval. If the County is unable to apply the updates and configuration change within
that time, then the County shall submit to the Secretary of State documentation outlining
why the changes cannot be made, how the changes would impact the system's accuracy
and efficiency, if at all, and the County's plan for applying the updates and making the
system configurations changes.
33.The next version of VSAP shall remediate all incomplete or missing header comments,
the language vulnerability, and all dead code instances.
34.The next version of VSAP shall update and remediate the third-party findings set forth in
the Consultant's Software Report.
IN WITNESS WHEREOF, I hereunto set my hand and
affix the Great Seal of the State of California, this
31st day of March 2022.
8