Bill > HR6315

This bill, known as the SECURE IT Act, amends the Help America Vote Act of 2002 to enhance the cybersecurity of election systems through two primary mechanisms. First, it requires the Election Assistance Commission (EAC) to implement penetration testing—a process where cybersecurity experts attempt to identify and exploit vulnerabilities in voting system hardware and software—as part of the standard testing and certification process for voting systems. The National Institute of Standards and Technology (NIST) will recommend entities to conduct these tests, and the EAC will vote on their accreditation. Second, the bill establishes a five-year pilot program called the Independent Security Testing and Coordinated Vulnerability Disclosure Pilot Program for Election Systems (VDP-E), which creates a structured framework for cybersecurity researchers to legally test election system vulnerabilities. The program allows election system vendors to voluntarily participate, provides a safe harbor that protects researchers from legal action, and requires a standardized process for reporting and addressing cybersecurity vulnerabilities, including mandatory notifications to vendors, election officials, and government agencies when critical security issues are discovered. The overall goal is to proactively identify and address potential cybersecurity risks in election infrastructure before they can be exploited.

Government Affairs

https://www.congress.gov/bill/119th-congress/house-bill/6315/all-info