EAC committee OKs revised guidelines for hack-proof elections
- By Adam Mazmanian
A key committee of the Election Assistance Commission has approved new voluntary guidelines for ensuring the security and reliability of election systems. The vote took place during a Sept. 12 meeting of the commission that was led by Kent Rochford, acting director of the National Institute of Standards and Technology.
The vote came at a time when cybersecurity experts are warning
that election systems are vulnerable to hacking and almost a year
after the Department of Homeland Security added the systems to its
list of critical U.S. infrastructure. The new document revises guidelines that were developed in 2005 and last updated in 2015.
The guidelines are a statement of goals, not a set of specifications to secure voting technology. The draft calls for an audit trail for electronic votes, data interoperability among voting systems, logging of user access for election tools and limits on who gets access and under what circumstances. On the hardware side, the guidelines look to tighten up physical security by making sure any attempt to tamper with voting gear leaves physical evidence.
The guidelines also call for data protection. While it doesn't require encryption per se, the guidelines call for all cryptographic algorithms to be, "public, well-vetted, and standardized."
Even if approved, the EAC goal won't bind state and local governments to acquire new systems or make improvements to existing election systems. Election officials from several states have publicly bristled at the possibility that the federal government might assert a more direct role in election security standard.
"Today's vote is a watershed moment in the effort to implement the next generation of standards used to test voting systems," said EAC Chairman Matthew Masterson. "These new guidelines are designed to spur innovations that allow local election officials to give voters the best experience possible. The standards will ensure improved accessibility, security, accuracy and auditability of voting systems."
The guidelines go to the EAC Board of Advisers and Standards for review, followed by a public comment period. The guidelines are slated to be complete by the end of 2017.