Tag Archives: cyber security

With election season — and security review — looming, state confident of cybersecurity readiness

Michigan Secretary of State Ruth Johnson, left, with new voting equipment.(Supplied/SOS office)

 

By. K.D. Norris

ken@wktv.org

 

While the Michigan Department of State has recently been touting the state’s election security readiness, Secretary of State Ruth Johnson and the state’s Bureau of Elections which she oversees recently announced that it would be hiring an outside firm to conduct the state’s first “extensive security-related review” of cybersecurity readiness.

 

The news of the planned cybersecurity review was first announced in late June when the state included in its 2018-19 budget $535,000 in state money to match a federal grant and making available a total of $11.2 million for enhanced election security.

 

“Regarding the $11.2 million in new state and federal money for election security,” Fred Woodhams, Michigan Secretary of State’s Office spokesperson, said in an email to WKTV. “The Bureau of Elections is seeking to hire an experienced firm with election administration and cybersecurity expertise to perform the security review with at least initial findings expected to be reported before the November general election.”

 

The outside firm will “conduct a security review of state, county and local election-related systems to identify potential vulnerabilities and methods to mitigate them,” he said. “The work will be the first time such an extensive security-related review will be performed but that is just the start of our plans to use the new money for election upgrades over the next few years.”

 

Currently, the state’s Chief Security Officer, housed in the Michigan Department of Technology, Management and Budget, oversees the state’s IT systems and has an office devoted to cybersecurity, according to Woodhams.

 

The Chief Security Officer “office works closely with our elections and IT staff,” Woodhams said. “The state has long-standing efforts to protect systems from malicious activity. In addition to those efforts, the new money will be allow us to hire an outside firm to search for vulnerabilities to the systems of the state and also local communities. It will be the first time that part has been done.”

 

The cybersecurity threat to local elections is an on-going debate in Washington, D.C., but the overall threat was made clear in February of this year when a Congressional Task Force on Election Security reported “Russia’s unprecedented assault on the country’s elections in 2016 – including targeting 21 states’ voting systems – exposed serious national security vulnerabilities to our election infrastructure – which includes voting machines and voter registration databases.”

 

There is no evidence that Michigan’s voting system was compromised by any entity in 2016.

 

“We are very confident in the state’s elections systems,” Woodhams said, “due to, among other reasons, the extensive and redundant accuracy and integrity practices that include a weeks-long, thorough canvassing process that verifies each precinct’s results, and ballot and voter numbers to make sure everything adds up.”

 

Voting machines in the cities of Wyoming and Kentwood were upgraded last year. (Supplied)

Woodhams also pointed out the many election upgrades Secretary Johnson and the Bureau of Elections have put in place for the 2018 election cycle, including all new next-generation election equipment used in all 1,520 cities and townships, expanded cybersecurity training for local election administrators and post-election audits that include ballot validation.

 

(For more information on local use of the new machines, see a WKTV Journal story here and also another story here.)

 

Woodhams’ remarks echo a statement by Secretary Johnson, in previous Department of State press release, regarding why the state’s voters should be confident in election security.

 

“Most importantly, every voter across Michigan still will use a good, old-fashioned paper ballot to mark their choices,” Secretary Johnson said. “Then they’ll feed the ballot into a new next-generation voting machine designed with security in mind. But buying all new election equipment isn’t all we’ve done to safeguard our election system.

 

“We carefully reviewed and improved our systems, and we’ll be putting $11 million of federal security grants toward further strengthening them against attack. Plus, we’re adding required cybersecurity training to our local clerk education programs.”

 

After Kent County installed new voting machines in time for last year’s fall election, the Aug. 7 primary will be the first statewide election in which every city and township will use all new voting equipment that includes optical-scan ballot tabulators, accessible voting devices for voters with disabilities, and new election-management and reporting software.

 

Note: WKTV first heard discussion on the plan July 9 at the Wyoming-Kentwood Area Chamber of Commerce’s Government Matters meeting when the Secretary’s west Michigan representative spoke of the grant and its intended election cybersecurity use.