Colorado: Official details plans for penetration testing of election systems | Benjamin Freed/StateScoop
The Colorado secretary of state’s office said Tuesday it is partnering with the security firm Synack to conduct penetration tests of its election systems ahead of the presidential vote. In an interview with StateScoop, Trevor Timmons, the chief information officer for Secretary of State Jena Griswold, said Synack’s team of white-hat hackers will poke and prod the agency’s election infrastructure, including the statewide voter registration database and Griswold’s office’s main website. “We need to know [vulnerabilities],” Timmons said. “We’ve got enough time that if they found anything we’d be able to respond to them.” Timmons said Synack will be focusing on anything that’s “internet-connected.” While Colorado is one of five states where nearly all voters cast ballots by mail, the penetration tests will also include electronic poll books at physical precincts for people who choose to vote in person. Colorado has used penetration testers to review its election systems before, Timmons said, including services offered by the U.S. Department of Homeland Security and other private companies. But he also said that Synack, which has offered its services to election officials in previous cycles, is providing these tests on a pro bono basis as part of an expansion into the election space.

