In the upcoming year of 2024, a crucial time for many nations across the globe with national elections on the horizon, the focus on election security remains paramount. While the 2020 election season was deemed successful in terms of security efforts despite challenges such as misinformation, disinformation, and foreign interference, the year 2024 presents distinct challenges on a larger scale and within the backdrop of significant global events.
At the RSA Conference 2024, CISA Executive Director Brandon Wales emphasized the evolving nature of election security efforts since CISA’s involvement in safeguarding election infrastructure in 2017. Every election cycle brings its unique set of challenges, and it is essential for CISA to adapt and cater to the needs of election stakeholders as they navigate through these challenges.
The priority placed on cybersecurity in election security escalated in 2017 when Russia made attempts to interfere in U.S. state elections. By 2020, adapting to the ongoing pandemic required changes in voting technology and processes. Looking beyond 2020, Wales highlighted the increased focus on securing mail-in ballots and defending against physical threats. CISA has proactively conducted physical security assessments, training sessions, and provided support based on the needs of election officials across the country.
To strengthen election security for the upcoming 2024 elections, CISA launched the #Protect2024 campaign, offering support against cybersecurity, operational security, and physical security risks. Additionally, collaborating with the FBI and the Office of the Director of National Intelligence, CISA published a guide outlining strategies to secure election infrastructure against foreign influence operations.
Internationally, CISA has engaged with partners to exchange information and insights on election security approaches in diverse nations. By learning from the experiences of other countries in handling threats and risks, CISA aims to enhance its strategies and support for election officials.
At the RSA Conference, industry experts discussed the importance of partnering between the research and voting vendor communities in ensuring secure elections. A panel highlighted the results of an IT-ISAC pilot program that allowed security researchers access to modern voting technology to identify vulnerabilities under coordinated vulnerability disclosure guidelines.
The success of the pilot program emphasized the significance of transparency, collaboration, and trust-building between researchers and election technology providers. As tensions between researchers and vendors exist, fostering positive relationships and working towards a common goal of securing elections becomes crucial.
Embracing the complexities of election security, the collaborative efforts between various stakeholders, including government agencies, election officials, security experts, researchers, and vendors, are instrumental in safeguarding the democratic process. As the world gears up for a year of pivotal elections, the collective commitment to enhancing election security remains a top priority to uphold the integrity and resilience of democratic processes worldwide.