Homeland Security: A Third of States Haven’t Contacted Us About Election Cybersecurity

The Russian government’s alleged involvement in disrupting or influencing the 2016 elections in the United States is one factor that prompted the Department of Homeland Security (DHS) to offer cybersecurity services to state, county and local election agencies. Just a month out from the elections, however, while thirty-three states have taken up DHS on its offer, only eleven county and local election agencies have done so.

This lack of response prompted DHS Secretary Jeh Johnson to issue a call Monday for more agencies, including the seventeen remaining states, to take advantage of the screening. While not all states, counties and local elections involve electronic voting, most, if not all, have some vulnerability, as Johnson pointed out:

Our services include cyber hygiene scans on Internet-facing systems, as well as risk and vulnerability assessments. We can conduct cyber hygiene scans remotely, and provide state and local election officials with a report identifying vulnerabilities and recommendations to improve online voter registration systems, election night reporting systems, and other Internet-connected election systems.

Johnson warned that time is very short to secure these election systems given the lag in between authorization for the screening and the testing for and fixing of any shortcomings:

Time is a factor. There are only 29 days until election day, and it can take up to two weeks from the time we receive authorization to run the scans and identify vulnerabilities. It can then take at least an additional week for state and local election officials to mitigate any vulnerabilities on systems that we may find.

A number of states returned to paper ballots to try to avoid some of the pitfalls of electronic voting.

Related Content