one person, one vote (security, verification, data integrity) deadline? voting period durations and boundaries electorate: who is eligible? will the system do registrations, or use some pre-made DB? anonymity --------------------------------------- tallying -- vote totals, summary stats useability performance: many requests per min redundancy: long MTF recoverability: no data loss on failure verifiability: paper trail, trust accessibility: what if a voter has a disability? what if voter has no computer, phone, internet? --------------------------------------- people: user, voter, candidate, admins what happens if election structure changes (candidate quits/dies) management -- assign tasks, give privs who can "build" an election?