Exploring the Legal Framework for Election Cybersecurity

CISA is the primary federal agency responsible for coordinating and supporting efforts to protect the nation's critical infrastructure, including election systems, from cyber threats.

HAVA was enacted to provide federal funding to states and localities to help them improve the administration and security of their election systems.

The CFAA prohibits the unauthorized access or alteration of election records or systems, making it a federal crime to hack into election systems or manipulate election data.

The EAC provides technical assistance to states and localities on election security, including guidance on best practices and resources for implementing cybersecurity measures.

The FBI is responsible for investigating and prosecuting election-related crimes, including voter fraud, election hacking, and interference in election processes.

The NIST Cybersecurity Framework provides voluntary cybersecurity guidelines for organizations to help them protect their systems and data from cyber threats.

HAVA requires states to conduct post-election audits to verify the accuracy of election results, including manual recounts and risk-limiting audits.

The DHS coordinates federal efforts to protect election infrastructure from cyber threats, including providing cybersecurity support to state and local election officials and sharing intelligence on election-related cyber threats.

HAVA prohibits the use of electronic voting machines that do not produce a paper record of each vote, known as a voter-verified paper audit trail (VVPAT).

The CISA Election Infrastructure GCC coordinates federal, state, and local efforts to protect election infrastructure from cyber threats.

The NVRA requires states to implement a statewide voter registration system that allows voters to register to vote at various locations and times.

The NCCIC provides cybersecurity alerts and advisories to election officials to help them protect their systems from cyber threats.

HAVA requires states to establish a provisional ballot system for voters who are unable to vote on regular ballots, such as voters who are challenged at the polls or who have moved to a new state.

The EAC Voting System Testing and Certification Program certifies voting systems for use in federal elections, ensuring that they meet certain security and accuracy standards.

HAVA prohibits the use of electronic voting machines that are connected to the internet, known as internet-connected voting machines, due to the risk of cyber attacks.