A giant bill House Democrats proposed on Friday includes a number of measures aimed at improving election security and voter confidence. The measures in H.R. 1 draw on provisions from several bills that were proposed but failed since the 2016 election, which experts and officials concluded was targeted by a Russian-led influence operation. Key features include a requirement that federal elections be conducted with paper ballots that can be counted by hand or optical scanners, new grants that states and municipalities can use to improve and upgrade equipment, an incident reporting requirement for election system vendors and a number of other measures meant to keep election systems’ security up-to-date. Election security experts have criticized paperless voting machines because of their vulnerability to tampering with little recourse, since they produce no auditable paper trail of each vote. Such machines were used to some extent in more than a dozen states in the recent midterm elections, according to Verified Voting. In South Carolina and Georgia, voters sued the government under the premise that their votes aren’t being properly counted with paperless machines. The bill, also called the “For the People Act,” would statutorily do away with these machines for federal elections by 2022.
… Vendors that supply election equipment or services paid for by the grants would get a cybersecurity incident reporting requirement under the proposed bill. They would have to notify election agencies, the Secretary of the Department of Homeland Security and the EAC commissioner within three days if they suffer a cybersecurity incident.
Vendors would also be mandated to undergo testing nine months before a federal election to make sure they meet government-issued guidelines and best practices for election cybersecurity.
More scrutiny of vendors would come in the form of a proposed bug bounty program, inviting security researchers to probe their products for security vulnerabilities that can be remediated. However, the program would be voluntary for vendors, as well as state and local offices.