On February 14th, Bridget Bean, acting Executive Director of the Cyber and Infrastructure Security Agency (CISA), announced a pause on all election security work pending an internal review. This decision also included cutting funding for the Election Infrastructure Information Sharing and Analysis Center (EI-ISAC), which is crucial for providing cybersecurity assistance to state and local election officials.
Tomorrow, March 6th, CISA is expected to conclude its review and send findings to the White House. It remains uncertain if these findings will be publicly disclosed or provide transparency about ongoing programs.
The National Association of Secretaries of State (NASS) emphasized the importance of CISA's services in defending against cybersecurity threats. The Department of Homeland Security has designated election infrastructure as critical since 2017 due to escalating foreign attacks targeting it. During the 2024 elections, foreign adversaries used various techniques to attack state and local offices.
Federal efforts have been vital in responding to cyberattacks. For instance, CISA alerted Coffee County, Georgia officials about Iranian actors targeting their network. EI-ISAC has grown significantly, offering free services like vulnerability scans and penetration testing.
Al Schmidt, Republican Secretary of the Commonwealth of Pennsylvania, stated that CISA provides "a national and global perspective" on cybersecurity risks that individual states cannot manage alone. In Washington state, 15 county governments receive tools from CISA for network defense.
Beyond cybersecurity, CISA also addresses physical security threats against election offices. Nearly 40% of election officials have reported receiving threats. In 2024, CISA coordinated responses to threats like white powder envelopes and bomb threats from foreign adversaries.
CISA's enabling legislation mandates securing critical infrastructure risks. Continuing this work requires adequate staffing with cybersecurity and physical security advisors. However, recent reports indicate that demand for services occasionally outpaced staff capacity.
With tomorrow's deadline approaching for concluding its review, it is unclear if CISA will make its decision public. If there are permanent reductions or eliminations in election security work, transparency is essential. Marion County Supervisor Wesley Wilcox highlighted the importance of EI-ISAC’s situation room during upcoming special elections in Florida.
NASS leadership has reiterated that "CISA’s prioritized services help election entities defend against these national security threats." Any reduction in support could weaken America's defenses against critical infrastructure attacks.
