Bill > SB5014

This bill focuses on enhancing election security by introducing comprehensive cybersecurity measures for county election offices. The legislature finds that electronic and physical security of election infrastructure is crucial and proposes several key requirements to be implemented by July 1, 2027. These requirements include mandating the use of ".gov" top-level domains for election websites and email communications, which are managed by the Department of Homeland Security and offer fraud prevention controls. The bill also requires counties to partition their electronic networks, physically or logically separating election infrastructure from other county systems to reduce potential security risks. Additionally, the bill requires immediate disclosure of any security breaches or malicious activities by voting system manufacturers, distributors, and county election offices to the secretary of state and attorney general. Counties must install continuous network intrusion detection systems and implement strict security protocols for voting systems, such as isolating ballot counting equipment from external networks, restricting system connections, and using single-use data transfer devices. The goal is to create a more secure election environment by establishing robust cybersecurity practices and minimizing opportunities for unauthorized access or manipulation of election systems.