2018 ELECTION SECURITY PLAYBOOK
• Supply chain threats
Potential Impacts to an Election
The above threats must be addressed, because they can potentially impact an election by causing failures to meet election deadlines, causing failures to process results on-time, and causing overall failures of the voting system. Preventative Measures and Mitigations In order to address the threats and vulnerabilities listed above, our office implements preventative measures through security mitigations and controls. Security Mitigations and Controls Categorizations of Security Controls Security requires a comprehensive strategy, consisting of multiple facets. Security mitigations can be classified by the types of controls necessary for a secure organization. The types of controls are 4 : Administrative controls - Administrative controls are procedures implemented to define the roles, responsibilities, policies, and administrative functions needed to manage the environment. The employee hiring and separation procedures listed below are examples of the administrative controls we have in place. Technical controls – Technical controls are electronic hardware and software solutions implemented to control access to information and information networks. The intrusion detection systems listed below are examples of the technical controls we have in place. Physical controls - Physical controls protect the organization’s people and physical environment, such as locks, fire management, gates and guards. The security cameras and badge access controls listed below are examples of the physical controls we have in place.
In our process of identifying preventative measures and mitigations for our systems, we
4
Tipton, Harold F. Official (ISC)2 guide to the CISSP CBK. Boca Raton, FL: CRC Press, 2010. Print.
ORANGE COUNTY REGISTRAR OF VOTERS 10
Made with FlippingBook Digital Proposal Creator