With all the furor around election tampering, why aren't there regulations around vote counting hardware/software?

Is the CMM still a thing?

https://en.wikipedia.org/wiki/Capability_Maturity_Model

"The CMM was originally intended as a tool to evaluate the ability of government contractors to perform a contracted software project."

For something as important as elections, developers (organizations) should be required to adhere to CMM 5 and use a very tight waterfall + TDD practices. Further, the product and testing requirements should be public. Not this shadow development crap.