Election Officials Build Independent Cyber Defenses as Federal Support Collapses
The withdrawal of federal cybersecurity support and the dismantling of the Election Assistance Commission have left state and local election officials increasingly isolated in defending critical democratic infrastructure. Without coordinated federal backing, states face fragmented, inconsistent defenses that create exploitable gaps across jurisdictions. The politicization of election oversight — including legal threats against officials — further erodes trust and discourages information sharing, a cornerstone of effective incident response. This matters because adversaries, both foreign and domestic, benefit most when defenders are divided and resource-constrained. Critical infrastructure protection cannot rely on any single layer of support; resilience must be built redundantly across local, state, and federal tiers.
Tactical Insight
Immediate actions
- Establish formal state-level cybersecurity coordination centers (CISACs) to replace lost federal information-sharing channels.
- Audit all election systems for unpatched vulnerabilities and remediate before the next election cycle without waiting for federal guidance.
Long-term improvements
- Build mutual-aid compacts between states to share threat intelligence, incident response resources, and cybersecurity expertise independently of federal programs.
- Develop and regularly test jurisdiction-specific incident response plans that do not depend on federal agency availability or cooperation.
- Maintain air-gapped or network-segmented voter registration and tabulation systems to limit lateral movement in the event of a breach.
Detection & resilience measures
- Deploy continuous monitoring and logging on all election infrastructure to ensure auditability regardless of federal oversight status.
- Establish backup communication channels and out-of-band coordination protocols so election officials can coordinate securely even if primary networks are compromised.