(a) The state board of elections shall promulgate minimum security standards for any electronic device, and any network or system to which the electronic device is connected, that is used to store or otherwise access a computer generated registration list, and shall also promulgate a list of devices that are approved for use. No local board of elections shall be permitted to use such a device unless the state board of elections has previously approved the device for use and has certified that the network or system to which the electronic device is connected is compliant with the minimum security standards.
(b) The minimum security standards for such devices shall be commensurate with the level of security risk applicable to such devices and shall specifically take into account any security risk associated with voting equipment-related supply chains in addition to any other applicable security risk.
(c) The state board of elections shall promulgate minimum redundancy procedures to ensure a list of registration records is available that provides necessary information in a compressed format to ensure voting continues if the electronic computer generated registration system becomes unavailable for any poll site or election district that utilizes such an electronic computer generated registration list.