Saturday, September 22, 2018

State Election Security Spending Guidance for 2018


On March 23rd, 2018, the U.S. Congress passed a Comprehensive Spending Bill that includes $380 Million Dollars in much-needed Funding for Improving Election Security in the States. Each State is Guaranteed at least $3 Million in Grant Funding to improve Election Security, with additional Funding available based on a State’s Population.

These States: Arkansas, Delaware, Florida, Georgia, Indiana, Kansas, Kentucky, Louisiana, Mississippi, New Jersey, Pennsylvania, South Carolina, Tennessee, and Texas, must Immediately Replace Paperless Machines with Voting Systems that Produce a Voter Verified Paper Record, preferably a Paper Ballot. But the Grants will not Cover the Cost to purchase New Voting Equipment.

These requirement will provide these States with the ability to perform Recounts and Audits. States are also directed to: Implement Robust Post-Election Audits and make important Cybersecurity and Technical Upgrades to Election Infrastructure. When Receiving a Grant, States must Commit to Match Federal Funding by at least 5% as part of their State Budgets within a Two-Year Period.

Some States are already taking Steps to Fortify Election Infrastructure:

On February 9th, 2018, Pennsylvania Gov. Tom Wolf’s (D) administration, which still uses Paperless Voting Machines in some Jurisdictions, Ordered Counties looking to Replace Voting Systems must Purchase Machines with Paper Records.

On February 27th, 2018, the Kentucky State Board of Elections Voted to Require Voter-Verified Paper Trails for All Future Election Equipment purchases throughout the State.

In March, Michigan announced that 2018 Post-Election Audits will be Performed through Manual Hand-Count, as opposed to Automated retabulation.

In March, Minnesota Secretary of State, Steve Simon (D), announced that Minnesota would begin providing Cybersecurity Training to Election Officials.

On March 1st, 2018, Arizona Gov. Doug Ducey (R) issued an Executive Order creating an Arizona Cybersecurity Team, Charged with Improving the State’s Cybersecurity Capabilities through Collaboration and Information Sharing between Experts from the Public and Private Sector on Cybersecurity Best Practices.

On March 7th, 2018, Washington Passed a New Election Security Package to Strengthen the State’s Post-Election Audit Procedures and require Voting System Vendors to Disclose Security Breaches in their Systems, among other efforts.

on March 29th, 2018, A Spokesperson from the Connecticut Secretary of State’s Office said that Staff are already meeting to determine how best to use their State’s Funding.

On March 29th, 2018, Vermont Secretary of State, Jim Condos (D) said, that the federal Grants will allow his State to “invest in additional tools, cybersecurity protections and equipment,” including Penetration Testing on Election Systems, as well as Replacing the State’s “Aging Infrastructure.”

Oregon is Hiring a Cybersecurity Expert to Improve the Overall Security of the State’s Voter Registration Database.

Still, as illustrated in (CAP) Center for American Progress’ Report “Election Security in All 50 States: Defending America’s Elections,” Vulnerabilities in Election Infrastructure remain in all 50 States and the District of Columbia. And while the Bipartisan Funding Allocated by Congress is a good First Step in improving Election Security, Research shows that Additional Funding will be needed in the Future to Shore-Up State systems. Indeed, CAP Estimates that $1.25 Billion over a 10-Year Period is needed to Fortify Elections.

Because Federal Funding is Limited, States must Spend their Grant Monies wisely and pursuant to the Bill’s Language and Directives from the Election Assistance Commission (EAC), which Congress has given the Authority to Distribute these Funds, pursuant to the Help America Vote Act (HAVA) of 2002.

States are Required to Provide an Overview and Budget for how they Plan to Spend their Allotted Funds and subsequently must Report their Spending to the EAC, which provides another Measure of Accountability.

Specifics on how States will use their Grant Funds are still being Formulated. However, over the coming Months, Congress, Government Watchdog Groups, the Media, and the Public must closely Monitor State Spending to Ensure State Officials use their Funding Efficiently, Effectively, and Pursuant to Federal Requirements.

In Prioritizing State Spending of Federal Grants, CAP agrees with the March 2018 Guidance provided by the Senate Intelligence Committee and the EAC, and thus, recommends the following:

1. Prioritize Switching to Paper-Based Voting Systems:

Fourteen states still use paperless electronic voting machines in at least some jurisdictions. These states—Arkansas, Delaware, Florida, Georgia, Indiana, Kansas, Kentucky, Louisiana, Mississippi, New Jersey, Pennsylvania, South Carolina, Tennessee, and Texas—must immediately replace paperless machines with voting systems that produce a voter verified paper record, preferably a paper ballot. These states should look to Virginia, which replaced all its paperless electronic voting machines with a statewide paper ballot voting system just weeks before the 2017 elections. Unfortunately, recent analysis by the Brennan Center for Justice and Verified Voting found that the $380 million allocated by Congress is not enough to replace all paperless electronic voting machines in all the states that currently use them. The federal funding does allow states to begin replacing at least some machines, which is an important improvement.

2. Implement Robust Post-Election Audits:

Robust post-election audits, such as risk-limiting audits, confirm and instill confidence in the accuracy of election results. Robust post-election audits can only be carried out with strong voter verified paper trails and cannot be applied to paperless electronic voting machines that do not produce a reliable record of voter intent. Only two states—Colorado and Rhode Island—have audit requirements in place that can reliably detect and remedy incorrect election outcomes if they occur. States that have strong paper voting systems but require significant upgrades to their current auditing procedures include: Alabama, Arizona, Idaho, Iowa, Maine, Maryland, Massachusetts, Michigan, Montana, Nebraska, New Hampshire, North Dakota, Oklahoma, South Dakota, Vermont, and Virginia.

3. Provide Cybersecurity Training for Election Officials:

In 2016, hackers waged a series of spear-phishing and other attacks on state and local election officials in an organized effort to steal sensitive information allowing hackers access to voter databases. In addition to serious privacy concerns, breaches to voter databases could prevent eligible voters from casting ballots that count when they show up to the polls on Election Day. Hackers could alter or delete voter registration information, which in turn could result in eligible voters being turned away. In the current threat environment, election officials with access to voter databases must be properly trained on how to identify and properly respond to potential spear-phishing attacks and other suspicious cyber activity. The states that need to begin providing cybersecurity training to election officials include: Connecticut, Idaho, Maine, Missouri, Nevada, South Dakota, Texas, Vermont, and Wyoming.

4. Fortify Election Equipment and System Databases:

Relatedly, states must work alongside cybersecurity experts and computer scientists to fortify election equipment and system databases, implementing cybersecurity best practices. The U.S. Department of Homeland Security already offers cyberhygiene scans, as well as risk and vulnerability assessments of election infrastructure to states at no cost. In addition to implementing cybersecurity best practices, states should dedicate funding to appointing or training experts specializing in the cybersecurity of election infrastructure and should conduct their own regular and vigorous threat assessments on election databases to identify and prevent potential vulnerabilities and attacks in real time.

Conclusion:

The $380 Million allocated by Congress represents a kind of Down Payment for Upgrading and Improving the Nation’s Election Infrastructure. Although it is not enough to Fully Upgrade State Election Systems, it demonstrates a Bipartisan recognition by Congress of the Threat posed by Goreign Interference to America’s Elections and a desire to support States in their efforts to Protect against Future Attacks. States should continue acting on their own, where they have Existing Resources, to Switch to Paper Ballot systems; provide Cybersecurity Training to Election Officials; Improve Post-Election Auditing practices; and Dedicate Resources to Upgrading the Cybersecurity and Technological Standards of Election Systems.

Securing U.S. Elections depends on Coordination and Resource Sharing between the States and Federal Government. Congress’ Decision to Act in a Bipartisan way to dedicate some Much Needed Funding to Election Security is a good First Step.

CLICK HERE to view the 2018 HAVA Election Security Funds Distribution Map.










NYC Wins When Everyone Can Vote! Michael H. Drucker
Digg!

No comments: