Election Security Tools & Resources
The Center for Internet Security (CIS) and the Elections Infrastructure Information Sharing and Analysis Center® (EI-ISAC®) provide many resources to support the cybersecurity needs of the election community.
Heard a rumor about CIS's support to election offices? Learn and share important facts about CIS and our cybersecurity efforts and help stop inaccurate information from spreading.
Rumor Control
CIS supports election offices by providing cybersecurity services to secure non-voting systems and data. These cybersecurity services operate only on the day-to-day administrative networks and systems of election offices and in no way interact with the technology used to collect and count votes.
Cybersecurity and Elections
Election offices use a significant amount of technology that has nothing to do with the actual casting or counting of ballots. Election officials depend on cybersecurity services to protect these non-voting systems. Learn about how this all works together in this resource.
Albert Network Monitoring and Management
Albert Network Monitoring is a network security solution provided to election offices to help secure non-voting technology, the computers and servers related to day-to-day administrative functions of the election office.
Albert and Election Security
Albert is a cybersecurity service that many election officials count on to alert them about network-level cyber threats to their non-voting systems. Learn about what Albert does and does not do in this resource.
Albert Support to State and Local Governments
Albert is a passive intrusion detection system (IDS), specifically attuned to look for threats to U.S. state and local governments. Learn about intrusion detection systems and Albert’s unique support to the public sector in this blog post.
Learn More About Albert
More About Albert
Albert sensors passively monitor network traffic data, providing security alerts for known cyber threats that are detected. Albert sensors, in combination with a layered defense-in-depth approach to cybersecurity, are proven to be highly effective in protecting against cyber threats, including known ransomware.
Learn More About Albert
Endpoint Detection and Response (EDR) Service for Election Offices
Endpoint Detection and Response is a device-level cybersecurity service provided to election offices through the EI-ISAC to help secure non-voting technology, the computers and servers related to day-to-day administrative functions of the election office.
EDR and Election Security
EDR helps election offices actively monitor and protect their physical devices like desktops, laptops, and servers against cyber threats. Learn about what EDR does and does not do in this resource.
CIS EDR Benefits for Election Offices
Endpoint Detection and Response provides numerous benefits to support the cyber defense of election offices, including next generation antivirus (NGAV) and 24x7x365 monitoring by the CIS Security Operations Center (SOC).
Learn More
EI-ISAC Services
EI-ISAC member organizations have access to numerous cybersecurity services and resources. There is no cost to join the EI-ISAC. Election offices and associations can join the EI-ISAC as members.
Learn More
RABET-V
The Rapid Architecture-Based Election Technology Verification (RABET-VTM) program is a rapid, reliable, and cost-effective approach to support election offices in verifying the security, reliability, and risks of non-voting election systems like electronic pollbooks and election night reporting systems.
Learn More
CIS supports election offices by providing cybersecurity services to secure non-voting systems and data. These cybersecurity services operate only on the day-to-day administrative networks and systems of election offices and in no way interact with the technology used to collect and count votes.
Cybersecurity and Elections
Election offices use a significant amount of technology that has nothing to do with the actual casting or counting of ballots. Election officials depend on cybersecurity services to protect these non-voting systems. Learn about how this all works together in this resource.
Albert Network Monitoring and Management
Albert Network Monitoring is a network security solution provided to election offices to help secure non-voting technology, the computers and servers related to day-to-day administrative functions of the election office.
Albert and Election Security
Albert is a cybersecurity service that many election officials count on to alert them about network-level cyber threats to their non-voting systems. Learn about what Albert does and does not do in this resource.
Albert Support to State and Local Governments
Albert is a passive intrusion detection system (IDS), specifically attuned to look for threats to U.S. state and local governments. Learn about intrusion detection systems and Albert’s unique support to the public sector in this blog post.
Learn More About Albert
More About Albert
Albert sensors passively monitor network traffic data, providing security alerts for known cyber threats that are detected. Albert sensors, in combination with a layered defense-in-depth approach to cybersecurity, are proven to be highly effective in protecting against cyber threats, including known ransomware.
Learn More About Albert
Endpoint Detection and Response (EDR) Service for Election Offices
Endpoint Detection and Response is a device-level cybersecurity service provided to election offices through the EI-ISAC to help secure non-voting technology, the computers and servers related to day-to-day administrative functions of the election office.
EDR and Election Security
EDR helps election offices actively monitor and protect their physical devices like desktops, laptops, and servers against cyber threats. Learn about what EDR does and does not do in this resource.
CIS EDR Benefits for Election Offices
Endpoint Detection and Response provides numerous benefits to support the cyber defense of election offices, including next generation antivirus (NGAV) and 24x7x365 monitoring by the CIS Security Operations Center (SOC).
Learn More
EI-ISAC Services
EI-ISAC member organizations have access to numerous cybersecurity services and resources. There is no cost to join the EI-ISAC. Election offices and associations can join the EI-ISAC as members.
Learn More
RABET-V
The Rapid Architecture-Based Election Technology Verification (RABET-VTM) program is a rapid, reliable, and cost-effective approach to support election offices in verifying the security, reliability, and risks of non-voting election systems like electronic pollbooks and election night reporting systems.
Learn More
The EI-ISAC’s Essential Guide to Election Security
The Center for Internet Security (CIS) has developed the Essential Guide to Election Security to serve as a first-stop resource for election officials to learn about best practices in election security. This can aid the process of building a program designed to meet the individual needs and abilities of any given election office.
VIEW THE ESSENTIAL GUIDE TO ELECTION SECURITY
Managing Your Online Presence Guide
This guide is intended to help election officials manage their social media presence, protecting their privacy and maintaining their professional integrity.
Learn More
Guidance for Election Day Disruptions
Election officials can prepare for election day disruptions with information found in this EI-ISAC guide.
Learn More
Incident Response Checklist
Learn how to identify, respond to, and communicate information about a breach.
Download Checklist
Are you Ready for the Next Election?
Learn how to add layers of security to your election networks and devices at no cost to you.
Technology Recommendations for Federal Election Security Funding
Identifies tools that can improve an election office’s cybersecurity posture in accordance with funding provided to states through the Election Assistance Commission.
Managing Cybersecurity Supply Chain Risks in Election Technology
This guide for election technology providers continues our approach of providing best practices for specific problem areas identified to CIS by the election community. It contains recommendations and best practices to address the need for cybersecurity risks and refers to these other CIS documents to describe a holistic, consistent approach to risk management.
Contact us for more information
Election Technology Procurements Guide
CIS developed this procurement guide to help with this challenge. CIS worked with a group of election stakeholders from federal, state, and local governments, community associations, and election technology vendors to develop a set of best practices tailored to improving security in election procurements.
Cybersecurity terms and definitions
A glossary of common cybersecurity-related terms and definitions.
Threat Intelligence Sharing
Real-Time Indicator Feeds
We leverage both internal and external sources to create the only intelligence feed tailored for SLTTs. Members can use carefully-vetted and verified indicators, including malicious domains and file hashes, to automate defenses across their local network, without additional equipment in most cases. They also have the option to choose from multiple collections of indicators derived from a range of resources.
Community Resources
Election Security Spotlights
A short non-technical explanation of a common cybersecurity term or practice, and its application to elections infrastructure.
Webinars
ISAC webinars examine critical and timely cybersecurity issues to provide participants with quality information in an interactive format. Attendees receive practical advice that can be applied immediately.
Tabletop Exercises
The EI-ISAC supports national and local cyber exercises through CISA.
Contact us for more information
Partner Resources
Resources from partners to help secure elections agencies.
CISA: Election Infrastructure Security
CISA offers election-related information and resources to help secure election infrastructure.
EAC: Election Security Preparedness
EAC offers resources to help election officials.
Google: Protect Your Election
Google offers tools to help defend information when it matters most.
Cloudflare: Athenian Project
Cloudfare offers free DDoS attack protection for at-risk public interest websites.
Global Cyber Alliance: Cybersecurity Toolkit for Elections
GCA offers free tools for election officials to take immediate action to improve the cybersecurity and integrity of our elections.
