No matter what side of the political divide on which one falls, everyone agrees that the security and integrity of elections are critical. Last month, I posted an article on Dark Reading to discuss the need to improve the security of the election infrastructure as the number of cyberattacks grow daily. The US Department of Homeland Security (DHS) confirmed that at least 21 states have had their networks scanned by Russian adversaries and the recent FBI indictments validate an organized cyberattack campaign that targeted political organizations, specifically the Democratic Congressional Campaign Committee and the Democratic National Committee.
Election infrastructure is a complex web of systems and networks that involves more than 8,000 entities with resources distributed across both state and local governments. Notably, election infrastructure is not just the systems that support the actual election process but also includes the operations of candidates and campaigns. Improving election infrastructure security requires a combination of a renewed focus on basic cyber hygiene, as well as the strategic use of advanced security technologies, threat intelligence, and information sharing.
To ensure our electoral system is protected for years to come, federal, state, and local governments have significantly increased investments in election infrastructure security. While no one thing will solve this problem overnight, by revisiting basic security hygiene, deploying next-generation technologies, and using, sharing, and acting on threat intelligence, we will begin to move forward in mitigating the massive amount of cyber-risk that currently threatens our election system. You can view the full Dark Reading article here, where I lay out ways in which we can improve our election infrastructure security by revisiting basic cyber hygiene, deploying next-generation cyber technologies, and using/sharing threat intelligence.
To learn more about how a Threat Intelligence Gateway can help with election infrastructure security check out this brief on Election Systems Protection.