CHAPTER THREE: ELECTRONIC TECHNOLOGIES IN VOTER REGISTRATION ------38 In addition to the receipt that confirms submission of the data, the voter should receive a unique number for the transaction that will serve as an identifier. The receipt and identifier can aid voters in exercising their right to check the preliminary voter list and demand corrections if data is erroneously recorded or if the voter is somehow omitted from the list. The receipt and identifier also can aid election observation groups and political contestants to conduct independent verification exercises with the consent of registered voters, who agree to participate in such efforts. Security, Back Up and Data Transfer Procedures. Security procedures should address two principal issues: (1) security of the data regarding unauthorized access and manipulation of data; and (2) security regarding potential loss and corruption of data. Election authorities should have defined security procedures that are made available for review by monitors from observation groups and political contestants. Monitors would not obtain security codes granting them access but would be able to comment on whether the procedures themselves seem adequate. To ensure adequate security, data must be protected with technical and organizational solutions, and election officials should employ both methods to secure the data. Technical solutions are built in to the equipment and limit access to authorized election officials. Equipment must be tamper resistant or at least tamper evident. Technical security solutions should also have clearly identified access levels - not all of the officials should have access to all of the data and processes. Organizational solutions are a set of rules that election officials must respect to protect access to the system. In order to protect data captured at the registration points, election officials must design a reliable back up process. Back ups have to be regular, scheduled and documented. Also, backed up data should be stored independently from the direct recording equipment, so that in case of malfunction of the equipment and loss of the original data, back ups are preserved. Storage and management of the back ups should also be included in design security procedures. Monitors from political contestants and observer groups should also be allowed to evaluate procedures for the data transfer. Data transfer can be physical (e.g., by moving memory cards from the direct data