2018 ELECTION SECURITY PLAYBOOK
Administrative • Business continuity plan – A business continuity plan is updated periodically.
• Policies and procedures – Policies and procedures are developed with cybersecurity in mind.
• Incident response plan – An incident response plan is developed in the event of a cybersecurity incident. • RFP security review – When requesting bids or proposals from vendors, we are including strict security requirements from the vendors. Physical • Physical security improvements – Since 2016 (and through 2018) we have made numerous improvements as a result of recommendations from independent assessments. • Enhanced physical security around election cycles – Security is provided by the Orange County Sheriff’s Department on and around the election. • Surveillance systems – Physical security is enforced with security cameras and other monitoring devices throughout our facilities. Collaboration • Collaboration at the federal level – We have developed a direct relationship with DHS, FBI, and the Election Assistance Commission (EAC). • Collaboration at the local level – We have developed a relationship with our Orange County’s Chief Information Security office, and the Orange County Intelligence Assessment Center (OCIAC). • Increased collaboration around election cycles – Before and after the election, we enhance our security awareness and communication, including regular meetings with the County’s security office, DHS, and the FBI. • Cyber resilience self-assessment criteria report – We will be performing the cyber resilience self-assessment as provided by DHS.
ORANGE COUNTY REGISTRAR OF VOTERS
13
Made with FlippingBook Digital Proposal Creator