Election security: Easterly leads

Welcome reader to your CybersecurityHQ report

Brought to you by:

Cypago - Enterprise-grade Cyber GRC Platform

Cypago enables strategic decision making through a full Cyber GRC product suite to help you avoid business reputation impact, financial or client trust losses

—

CISA's Jen Easterly on Fortifying Democracy: "Our Elections Have Never Been More Secure"

Jen Easterly, Director of the Cybersecurity and Infrastructure Security Agency (CISA), is facing one of the most critical moments in her career as the 2024 U.S. presidential election rapidly approaches. With a background as a West Point graduate, Army veteran, and Rhodes Scholar, Easterly brings a wealth of experience to the task. Leading CISA, which was established in 2018, she is at the helm of the nation’s cyber defense and critical infrastructure resilience. Her mission extends to securing the integrity of the election infrastructure, which has become more challenging in the wake of increasing foreign and domestic threats.

The 2024 election landscape presents a different array of challenges compared to previous years. CISA was designated as the federal lead for election security following Russia's attempts to meddle in the 2016 election. Since then, the agency has significantly ramped up its capabilities, working alongside state and local election officials to fortify election systems. This collaboration aims to reassure voters that their ballots are secure and will be counted accurately.

Easterly’s confidence stems from a multi-layered approach to securing the election infrastructure. She underscores that American voting systems are not connected to the internet, making large-scale hacking attempts nearly impossible. Over 97% of voters will cast their ballots in jurisdictions that use paper records, which can be audited if needed. Additionally, the decentralized nature of the U.S. election system—with various equipment and processes across different states—adds resilience, preventing a single point of failure. These factors collectively enhance the security and integrity of the electoral process.

The Human Factor: Election Workers Under Siege

While the technical infrastructure of elections may be resilient, the human aspect of election security is under significant strain. Since 2020, election workers have increasingly faced threats and intimidation, a development Easterly describes as "outrageous" and unacceptable. Election workers—often volunteers or public servants—are at the front lines of defending democracy. These individuals are not faceless bureaucrats but members of the community who believe in the electoral process and work tirelessly to ensure it runs smoothly. Yet, many have been subjected to harassment, threats, and even physical danger due to unfounded claims of widespread election fraud.

Easterly, herself a veteran who has faced dangerous situations in combat zones, empathizes with the fear that some election workers experience. She stresses that threats to election workers are not just attacks on individuals but are, in effect, attacks on democracy. The root cause, she argues, lies in the pervasive disinformation and baseless allegations surrounding the legitimacy of elections. A significant portion of this stems from political figures who propagate false claims of election fraud, often to delegitimize outcomes unfavorable to them.

The climate of distrust is particularly corrosive. According to a 2024 poll by the Brennan Center for Justice, one in six election workers has experienced threats related to their job, and nearly 80% reported feeling that they were under increased risk in recent years. This troubling trend poses a risk to the long-term integrity of U.S. elections, as fewer people may be willing to step up and fill these crucial roles in the future.

Disinformation: A Complex Battlefield

Easterly emphasizes that the current information environment is markedly different from that of previous election cycles. The explosion of social media platforms has resulted in a fractured information landscape, where misinformation and disinformation can spread rapidly, often without consequence. In past elections, CISA worked with social media companies to flag disinformation for review, a practice that has since been discontinued. Easterly believes that redirecting CISA's resources toward public education and amplifying accurate information is a more effective use of their efforts. CISA’s role, she clarifies, is not to police speech but to inform the public about threats and debunk false claims.

The threat of disinformation extends beyond domestic actors to include foreign adversaries like Russia, China, and Iran, which are known to engage in influence operations aimed at sowing discord and undermining confidence in U.S. democratic institutions. For example, in 2024, several Russian nationals were indicted for funneling money to influencers who unknowingly spread Kremlin-backed narratives on social media. Such activities aim to deepen political divisions and erode trust in the electoral process. CISA, alongside the Department of Justice and intelligence agencies, has been more proactive in disrupting these foreign influence campaigns.

Yet, as Easterly points out, the distinction must be made between influence operations and direct attempts to interfere with election infrastructure. While disinformation can have a substantial impact on public perception, there has been no evidence of successful hacking attempts that could alter election outcomes in a significant way. The safeguards in place, including paper ballots and robust auditing processes, would quickly reveal any tampering attempts.

The Role of AI in Shaping Election Security

A new challenge looms on the horizon: generative AI. The technology, capable of creating convincing audio, video, and text, introduces novel threats to election integrity. As deepfakes and synthetic media become more advanced, there is a risk that AI-generated content could be used to deceive voters or discredit officials. Easterly acknowledges the concern but maintains that while generative AI will exacerbate existing challenges, it is unlikely to be a "game changer" in 2024.

CISA has been proactive in preparing election officials to deal with AI-related threats, conducting over 180 tabletop exercises across the country. These exercises simulate potential scenarios involving deepfakes or AI-generated misinformation to help election officials develop response strategies. For instance, during a recent incident in New Hampshire, a robocall impersonating President Biden attempted to mislead voters about the primary election date. Such efforts at voter suppression are criminal acts, and election officials, in coordination with law enforcement, responded swiftly to mitigate the impact.

Moreover, AI companies are taking steps to reduce the misuse of their technologies. OpenAI, for example, recently restricted the use of generative models for creating election-related misinformation. While these efforts are helpful, the onus remains on the public to approach information critically and verify any suspicious claims with official sources.

Preparing for Election Night and Beyond

As Election Day approaches, the focus is not solely on November 5 but also on the days and weeks that follow. Given the decentralized nature of U.S. elections, results may not be immediately available, especially in battleground states where counting and certification processes can take days. Easterly urges the public to exercise patience and trust that election officials will ensure an accurate count.

She also warns of the heightened risk during the post-election period, when foreign adversaries are likely to intensify efforts to cast doubt on the legitimacy of the results. The period from November 5 to January 6, when the vote is certified by Congress, is seen as a prime window for disinformation campaigns aimed at undermining trust in the electoral process. CISA will be vigilant, monitoring for signs of foreign interference and communicating any findings to the public.

Democracy’s Fragility and the Road Ahead

Easterly’s concerns extend beyond cybersecurity. She reflects on the fragility of democracy, noting that the polarization and mistrust in American society today are unlike anything she has witnessed in her lifetime. As a veteran who has served in conflict zones, she draws a stark contrast between the solidarity experienced in those environments and the current climate of divisiveness in the U.S.

The stakes could not be higher. The 2024 election is not just about determining the next president; it is a test of the resilience of American democracy itself. As foreign adversaries seek to exploit divisions, Easterly calls on the public to unite and defend the institutions that have sustained the nation for nearly 250 years. The path to preserving democracy requires vigilance, truth, and a collective commitment to resisting disinformation.

In the end, Jen Easterly’s message is one of cautious optimism. While the threats to the election are real and evolving, the preparations undertaken by CISA, election officials, and the broader community of defenders provide a robust defense. For American democracy to endure, it will take more than just secure technology; it will take citizens who believe in the process and are willing to uphold it, come what may.

Stay Safe, Stay Secure.

The CybersecurityHQ Team