Voting infrastructure protections need fleshing out
- By Mark Rockwell
- Jan 25, 2017
Although voting systems have been designated “critical infrastructure” by the Department of Homeland Security on Jan. 6, the federal commission that helps state governments develop voting systems and administer elections is unsure of the implications of the new designation.
U.S. Election Assistance Commission plans to sit down with officials from DHS on Feb. 2 to get a clearer understanding of that protection.
The systems were designated as a subsector the of the existing Government Facilities critical infrastructure sector, one of DHS 15 sectors that also cover the energy, communications and chemical sectors.
"We still don't know what it means," Thomas Hicks, chairman of the U.S. Election Assistance Commission told FCW after his presentation at a biometric technology security conference in Arlington, Va., on Jan 24.
"We're hoping to have a forum to ask DHS and the Trump administration what the designation means and does it go forward" under the new administration, Hicks said.
The EAC is a federal independent agency that serves as a national clearinghouse and resource of information regarding election administration for state and local governments. It develops guidance for states, works on voluntary voting system guidelines and other work to help ensure systems function efficiently and securely.
Hicks said there are many areas under the DHS designation of state voting systems as "critical infrastructure" that need more definition and discussion.
"I'm neither for it or against it. I just don't know what it means," said Hicks in his keynote presentation at the Biometrics for Government and Law Enforcement conference.
Hicks said EAC wants to put some meat on the bones of the announcement by answering basic questions such as, "When can the [federal] government come in, who counts as an election official?"
The designation was made by then-DHS Secretary Jeh Johnson in light of reports of attempts to breach voting registration data in Arizona and Illinois ahead of the November election. The FBI determined that both hacks were from foreign sources, with the Arizona hack coming from Russia.
Under the designation, Johnson said states' requests for cybersecurity help are voluntary. States have to ask for DHS to come in to assess their system security, he said.
At the time, Johnson said the designation covers centralized vote tabulation locations used to support the election process, storage facilities and related information and communications technology, as well as voter registration databases, voting machines and other systems that manage the election process and report and display results on behalf of state and local governments.
Hicks told FCW that another issue surrounds how a state asks for DHS assistance. The parameters are hazy since election systems are run by many local governments within states.
"If Arlington County asks for DHS' help, does that mean the state of Virginia has asked for assistance?" Hicks said.
Some states voiced concern over the designation when it was announced. Georgia Secretary of State Brian Kemp called the designation "provocative" and a "blatant overreach" by the federal government.
Separately, Rep. Jason Chaffetz (R-Utah), chairman of the House Committee on Oversight and Government Reform, has asked the DHS Inspector General to look into Kemp's accusations that DHS probed his state's firewall before the November election.
This article was first posted to FCW, a sister site to GCN.
Mark Rockwell is a senior staff writer at FCW, whose beat focuses on acquisition, the Department of Homeland Security and the Department of Energy.
Before joining FCW, Rockwell was Washington correspondent for Government Security News, where he covered all aspects of homeland security from IT to detection dogs and border security. Over the last 25 years in Washington as a reporter, editor and correspondent, he has covered an increasingly wide array of high-tech issues for publications like Communications Week, Internet Week, Fiber Optics News, tele.com magazine and Wireless Week.
Rockwell received a Jesse H. Neal Award for his work covering telecommunications issues, and is a graduate of James Madison University.
Click here for previous articles by Rockwell.
Contact him at firstname.lastname@example.org or follow him on Twitter at @MRockwell4.