Publishing guidance around best practice should be mandatory when dealing with government infrastructure, these election systems are not "low level" target they can potentially influence the course of history if they are rigged.