; 116 Stat. 2135) is amended by inserting after the item relating to section 2214 the following: Sec. 2215. Mandatory cybersecurity requirements for systems used in Federal elections. Sec. 2216. Testing and certification of ballot marking and ballot tabulation device cybersecurity. . 202. Voting system cybersecurity requirements (a) Ballot tabulation devices Section 301(a) of the Help America Vote Act of 2002 ( 52 U.S.C. 21081(a) ), as amended by section 104 and section 105, is further amended by adding at the end the following new paragraph: (9) Ballot tabulation methods (A) In general The voting system tabulates ballots by hand or through the use of a ballot tabulation device that meets the requirements of subparagraph (B). (B) Requirements for ballot tabulation devices Except as provided in subparagraph (C), the requirements of this subparagraph are as follows: (i) The device is designed and built in a manner in which it is mechanically impossible for the device to add or change the vote selections on a printed or marked ballot. (ii) The device is capable of exporting its data (including vote tally data sets and cast vote records) in a machine-readable, open data standard format required by the Commission, in consultation with the Director of the National Institute of Standards and Technology. (iii) The device consists of hardware that— (I) is certified under section 2216 of the Homeland Security Act; and (II) demonstrably conforms to a hardware component manifest describing point-of-origin information (including upstream hardware supply chain information for each component) that— (aa) has been provided to the Commission, the Director of Cybersecurity and Infrastructure Security, and the chief State election official for each State in which the device is used