Congress Moves Towards Stricter Cybersecurity Measures for U.S. Election Technology
Congress is taking steps to enhance the cybersecurity of U.S. election technology through the introduction of the SECURE IT Act. This legislation, part of this year’s Intelligence Authorization Act, aims to strengthen the security of critical election technologies by requiring testing of federally certified voting machines and conducting penetration testing with ballot scanners.
Improving Election Security Through Independent Testing
The SECURE IT Act, originally introduced by U.S. Sens. Mark Warner and Susan Collins, would significantly enhance the security of critical election technologies. This legislation enables researchers to think like adversaries and identify hidden vulnerabilities by attempting to penetrate systems using tools and methods employed by malicious actors.
While election security concerns have expanded to encompass a wide range of threats, including violence at polling places and disinformation campaigns, the threat of hackers infiltrating voting systems remains a top concern. Russian interference in the 2016 election highlighted the vulnerabilities of voting machines, prompting calls for stricter federal standards and more independent safety audits.
Addressing Vulnerabilities in Election Technology
The SECURE IT Act includes provisions to address vulnerabilities in election technology. The first provision codifies the addition of penetration testing to the U.S. Election Assistance Commission’s certification process. This testing simulates real-world attacks to uncover and exploit weaknesses in machines, potentially revealing critical software flaws.
Additionally, the bill requires the EAC to pilot a vulnerability disclosure program for election technology, including systems not subject to federal testing. This program allows cyber experts to hunt for vulnerabilities in a variety of electoral systems, reporting any flaws they find to the organizers for remediation.
Expanding Scrutiny of American Democracy
The Warner-Collins bill has the potential to significantly expand scrutiny of the machinery of American democracy by allowing a diverse panel of experts to investigate vulnerabilities in various electoral systems. By prioritizing cybersecurity in the electoral process, Congress is taking proactive steps to safeguard the integrity of U.S. elections.
