CISA Releases Election Security Plan 40 Days Before Midterms

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), a division of the Department of Homeland Security, released a 13-page election infrastructure security plan on Thursday, approximately 40 days before the November midterm elections. This plan details potential threats to election systems and outlines the services CISA offers to election officials to safeguard the voting process. The release follows a commitment made by Homeland Security Secretary Markwayne Mullin, who had initially pledged to publish the plan by mid-August. This initiative aims to bolster state and local election officials' preparedness, particularly after concerns were raised about the adequacy of current efforts. Election officials have expressed apprehension that the timing of this plan might be insufficient, especially given previous actions by the Trump administration that significantly reduced CISA's election security work. These reductions reportedly forced many officials to seek and fund private security services to ensure election readiness.

Since its establishment in 2018, CISA has played a crucial role in alerting state and local election authorities about potential interference from foreign adversaries. However, its involvement in this capacity was notably diminished during the last election cycle, a consequence of the Trump administration's dismantling of key election security functions within the agency. Reports indicate that the administration implemented substantial cuts, including the dismissal of approximately 1,000 employees from CISA and a reduction of $10 million from two vital cybersecurity initiatives. One of these affected initiatives was specifically designed to assist state and local election officials in enhancing their security measures. Furthermore, CISA operated throughout the entirety of Trump's second term without a Senate-confirmed director, relying instead on a series of acting leaders to manage its operations.

The newly released 13-page document asserts that the Department of Homeland Security (DHS) has "consistently supported CISA’s delivery of cybersecurity and physical security services to election officials." It further states that these services are provided at no cost to state and local election officials, contingent upon their request. This claim, however, has been contradicted by numerous state and local election officials across the country who have spoken with The Associated Press. These officials have indicated that services previously offered by CISA, such as tabletop exercises to simulate election day scenarios and penetration tests to assess system vulnerabilities, are no longer readily available or have been significantly scaled back, leaving them to find alternative solutions.