CISA Releases Belated Election Security Plan Amid State Criticism

The Cybersecurity and Infrastructure Security Agency (CISA) released a 13-page election infrastructure security plan on September 24, 40 days before the November 3 midterm elections. The plan identifies primary risks as software vulnerabilities, insider threats, and hacks of voter registration databases, recommending multifactor authentication and the use of paper ballots for verification. Homeland Security Secretary Markwayne Mullin stated the plan is crucial for election fairness, though he had originally promised its release by mid-August.

Democratic secretaries of state from Nevada, Minnesota, Maine, Arizona, and Michigan criticized the plan as inadequate and belated. Officials reported that the Trump administration previously gutted CISA's capacity by cutting 1,000 employees and $10 million in funding, forcing some states to hire private vendors for penetration testing. Minnesota's Secretary of State reported spending approximately $250,000 on such services. In contrast, West Virginia's Republican secretary of state described CISA as a helpful resource with continual assistance.

The rollout occurred amid heightened political tension. Secretary Mullin warned that voting machine components manufactured in China introduce significant security risks, while a White House task force alleged that China and its proxies compromised the voter data of up to 220 million Americans. Additionally, members of Congress have demanded the restoration of funding to the Election Infrastructure Information Sharing and Analysis Center, which was reportedly defunded in 2025.