哈佛国家和地方选举网络安全手册英文版2018272页

TheStateandLocalElectionCybersecurityPlaybookDEFENDINGDIGITALDEMOCRACYFEBRUARY2018DefendingDigitalDemocracyProjectBelferCenterforScienceandInternationalAffairsHarvardKennedySchool79JFKStreetCambridge,MA02138’AmatoCoverphoto:VotingmachinesinMiamiShores,Fla.,Nov.8,2016,(APPhoto/LynneSladky)Copyright2018,PresidentandFellowsofHarvardCollegeHarvardKennedySchool/DefendingDigitalDemocracy/Version1.1:February15,20181TheCybersecurityCampaignPlaybookDEFENDINGDIGITALDEMOCRACYFEBRUARY2018ContentsDefendingDigitalDemocracyProject:AboutUs.....................................................................................................2AuthorsandContributors.........................................................................................................................................3Acknowledgments......................................................................................................................................................4ThePlaybookApproach.........................................................................................5Introduction............................................................................................................7Background.............................................................................................................8What’satStake..................................................................................................................................................8CybersecurityThreatstoElections...................................................................................................................8CommonGround...................................................................................................1410BestPracticesthatApplytoallElectionJurisdictions..............................................................................14SecurityInsightsbyElectionSystem..............................................................................................................19TechnicalRecommendations..............................................................................21SecuringStateElectionSystems.....................................................................................................................21VoterRegistrationDatabasesande-Pollbooks..............................................................................................22Votecastingdevices.........................................................................................................................................32ElectionNightReporting(ENR).......................................................................................................................40InternalandPublic-facingCommunications.................................................................................................43Appendices...........................................................................................................49Appendix1.VendorSelectionandManagement............................................................................................49Appendix2.ElectionAudits.............................................................................................................................52ExternalResourcesGuide....................................................................................55ElectionStafferHandout.....................................................................................57Glossary................................................................................................................59TheStateandLocalElectionCybersecurityPlaybookHarvardKennedySchool/DefendingDigitalDemocracy/Version1.1:February15,20182DefendingDigitalDemocracyProject:AboutUsWeestablishedtheDefendingDigitalDemocracyProject(D3P)inJuly2017withonegoal:tohelpdefenddemocraticelectionsfromcyberattacksandinformationoperations.Therearetwogroupsonthefrontlinesofdefendingdemocracy:(1)politicalcampaigns,whichenablecitizenstopursueelectedoffice;and(2)electionofficials,whoensuretheelectionprocessisfreeandfair.Lastyear,wesetouttoprovidecampaignandelectionprofessionalswithpracticalguidestothemostapplicablecybersecuritybestpracticesinadvanceofthe2018midtermelections.InNovember2017,wereleased“TheCampaignCybersecurityPlaybook”forcampaignprofessionals.Now,inFebruary2018,wearereleasingasetofthreeguidesdesignedtobeusedtogetherbyelectionadministrators:“TheStateandLocalElectionCybersecurityPlaybook,”“TheElectionCyberIncidentCommunicationsCoordinationGuide,”and“TheElectionIncidentCommunicationsPlanTemplate.”WhatfollowsisTheStateandLocalElectionCybersecurityPlaybook.D3Pisabipartisanteamofcybersecurity,political,andpolicyexpertsfromthepublicandprivatesectors.Tobetterunderstandboththecyb