1
00:00:00,000 --> 00:00:01,380
Good afternoon, Voting Village.

2
00:00:01,460 --> 00:00:02,800
My name is Forrest Senti.

3
00:00:02,800 --> 00:00:05,960
I'm the Director of Business and Government Affairs at the National Cyber Security Center.

4
00:00:06,000 --> 00:00:09,440
And I'm Maddie Gullickson, and I'm the Program Manager for Secure the Vote.

5
00:00:09,460 --> 00:00:11,340
We'd like to thank all of you for having us here today.

6
00:00:11,340 --> 00:00:14,320
We're excited to have our presentation accepted to the Voting Village.

7
00:00:14,320 --> 00:00:17,100
We look forward to future years and our work in elections.

8
00:00:17,440 --> 00:00:19,680
So we're with the National Cyber Security Center.

9
00:00:19,680 --> 00:00:22,680
We're a 501c3 based out of Colorado Springs, Colorado.

10
00:00:23,000 --> 00:00:29,860
We were founded in 2016, and a lot of our big focus has to do with cyber innovation and awareness and solving world cyber problems.

11
00:00:29,860 --> 00:00:42,800
We work in areas like space, where we actually have a presentation from one of our fellow colleagues in the Aerospace Village today, as well as areas like smart city technology like ICS and K-12, so being the future of the cyber workforce.

12
00:00:43,080 --> 00:00:48,880
Our presentation today is about the electronic ballot return standards and guidelines titled The Future of Voting.

13
00:00:48,880 --> 00:00:56,140
I want to start off by talking a little bit about who we are, what the program is, and kind of how we fit into this whole picture.

14
00:00:56,840 --> 00:01:07,860
I want to start off by acknowledging that Secure the Vote is a nonpartisan, multi-agency, multi-policy group that kind of goes after a layered challenge.

15
00:01:07,900 --> 00:01:23,240
A lot of the different things out there with groups like EAC, CISA, CIS, the Election Security ISAC, even groups like Verify Voting, MIT, the Alliance for Securing Democracy, all tackle different aspects of our election security problem in the U.S.

16
00:01:23,700 --> 00:01:36,880
And the combination of all these has led to a brilliant ecosystem in the United States that allows us for us to be able to publish and listen to and advocate for different policy standards, guidelines, whether it be at the federal or state and local levels.

17
00:01:37,600 --> 00:01:45,000
And a lot of our focus has primarily been on the ways that we can identify different gaps in critical infrastructure related to elections.

18
00:01:45,220 --> 00:01:55,100
So the first gap that we've really identified, that we really want to talk about, the reason why we're here again, is all about this gap where security exists in the conversation of election technology.

19
00:01:55,540 --> 00:02:03,840
Security traditionally over this past, you know, four or five years has become an even heightened level of focus in the world of election security.

20
00:02:04,680 --> 00:02:14,040
So we're not going to say that we're going to become the new experts, but the biggest thing for us is all about identifying the critical piece of the future of voting technology.

21
00:02:14,080 --> 00:02:20,800
And what it means is that we've identified that security, cybersecurity specifically, is a barrier to the future of election technology.

22
00:02:20,960 --> 00:02:34,240
And what that looks like is that if people with disabilities, or overseas voters, or even the everyday person who might have an emergency come up and they can't get to their mail-in ballot or in-person voting, that there's more and more calls, especially after the pandemic,

23
00:02:34,240 --> 00:02:35,580
that people want to do this.

24
00:02:35,580 --> 00:02:42,280
But the biggest thing the community agrees is that security is an issue and is a barrier to the future of where these technologies can go.

25
00:02:42,420 --> 00:02:44,760
And that's why we're interested in the conversation today.

26
00:02:46,200 --> 00:02:50,480
A little more background on us and how we've kind of learned more about this space and why.

27
00:02:50,480 --> 00:02:56,760
Our program was started in the middle of 2018, specifically to work on helping address security issues for overseas voters.

28
00:02:57,080 --> 00:03:06,340
Since then, we've participated in reviewing post-election logs and got feedback from jurisdictions and 10 pilots involving the use of mobile and online voting between 2019 and 2020.

29
00:03:06,840 --> 00:03:12,880
And like all critics of online and social voting, in every single pilot, we saw the need for enhancing these technologies.

30
00:03:13,180 --> 00:03:16,040
We also saw that there was also increased demand.

31
00:03:16,040 --> 00:03:23,180
Of the pilots we worked in, there was at least two to one, if in some cases three to one, and more demand for more places to use it.

32
00:03:23,180 --> 00:03:26,940
But the number one reason people chose not to is because of security concerns.

33
00:03:27,220 --> 00:03:40,740
So the more we try and understand these technologies and find and understand the different things that address the gap between where we are today, where we are tomorrow, consistently between election officials, the security community, and the academic community,

34
00:03:40,740 --> 00:03:46,280
we consistently see that not only are these technologies not going away, but the desire for them is growing.

35
00:03:46,540 --> 00:03:49,760
And to go back to the beginning, security is still a barrier.

36
00:03:51,920 --> 00:04:10,620
And through those pilots, some of the things that we have seen that are part of that core security problem are critical need for end-to-end verification of votes that maintains the secrecy of the ballot, critical need for common standards around voter verification procedures and policies.

37
00:04:10,620 --> 00:04:17,940
Again, there's really no federally mandated or even state mandated requirements around these newer technologies.

38
00:04:17,940 --> 00:04:24,840
And so there is a need for common standards around voter information privacy procedures as well.

39
00:04:24,960 --> 00:04:39,200
And also one of the biggest concerns is that vulnerability of the voters' devices that may have problems on them that could hurt the system and interfere with the vote.

40
00:04:39,200 --> 00:04:49,140
And so we really need to have a system in place and standards in place that these newer technologies can be held accountable to.

41
00:04:49,140 --> 00:04:53,180
We need pre-election reviews and post-election reviews.

42
00:04:53,180 --> 00:05:02,060
We need the same kind of a level of guidelines that are offered through the Voluntary Voting System Guidelines, the EAC.

43
00:05:02,620 --> 00:05:10,260
And that's really where we are working with, we have a working group that is looking at these different issues.

44
00:05:10,260 --> 00:05:14,120
We continue to look at these issues through the pilots.

45
00:05:14,480 --> 00:05:35,060
But ultimately, again, we're really working on these questions because even in 2016, there were about 3 million overseas voters who were eligible to vote, but only 6.9% of them actually submitted a ballot, compared to a 72% rate of domestic voters who were eligible to vote.

46
00:05:35,060 --> 00:05:51,280
We're doing this because if disabled voters had had the same access that voters without disabilities had in the 2018 election, we would have seen a rate increase of about 2.35 million additional voters participating in the system.

47
00:05:51,700 --> 00:06:04,860
Ultimately, we live in the 21st century, and we shouldn't accept that people living overseas or with disabilities don't vote because they struggle with access to voting centers or because they lack the privacy to do so.

48
00:06:04,960 --> 00:06:14,060
And this slide in particular just demonstrates that technology is a part of voting, and it is part of our infrastructure.

49
00:06:14,060 --> 00:06:20,620
We have email and fax are already continually used by over 31 states.

50
00:06:20,620 --> 00:06:26,300
We have web portals that are allowing people to return a ballot via a web portal.

51
00:06:26,380 --> 00:06:30,140
So the technology exists, it's moving in that direction.

52
00:06:30,460 --> 00:06:42,200
Again, we just believe that there needs to be a common set of standards and guidelines that can be used to help provide those guardrails as this technology develops.

53
00:06:44,220 --> 00:07:00,960
When we look back at our progress in voting, one of the biggest things, and this drives home the point that Forrest was making, is we see that most of our legislation around voting has had to do with undoing policy barriers that have actively kept people from voting.

54
00:07:01,640 --> 00:07:04,840
For the 21st century, what is that going to look like?

55
00:07:04,840 --> 00:07:12,680
It's going to look like trying to undo the barriers of technology and security as the things that prohibit people from voting.

56
00:07:13,700 --> 00:07:26,060
And so as we look to that future, we want to participate with as many people as possible and collaborate with as many people as possible to figure out what does that future state of voting look like?

57
00:07:26,060 --> 00:07:33,080
What is the timeline going to look like in the next 10 to 30 years of legislation that we see, of technological advancements that we see?

58
00:07:33,220 --> 00:07:37,300
These are some ideas, these are some of the things that we'd love to see happen.

59
00:07:37,440 --> 00:07:47,300
And we understand the concern about these types of technologies taking place today, but the point is that it isn't going away.

60
00:07:47,660 --> 00:07:49,660
And so how do we work together?

61
00:07:49,660 --> 00:07:52,240
How do we come together to figure out how to make these things happen?

62
00:07:52,240 --> 00:08:02,500
Because we believe that with the collective genius of the elections community and of the security community, we can make end-to-end voter verification a reality.

63
00:08:02,500 --> 00:08:09,040
We can make full-scale citizen audits of these a reality.

64
00:08:09,440 --> 00:08:16,480
And so this is what we envision when we see the timeline going forward and what gets us excited about it.

65
00:08:16,480 --> 00:08:27,420
With the different organizations that we've worked with, blockchain has been one of the ways that people have been able to... one of the technologies that people have used.

66
00:08:27,420 --> 00:08:28,620
Is that the right way?

67
00:08:28,620 --> 00:08:31,480
Does it complicate things or does it make it safer?

68
00:08:32,720 --> 00:08:38,440
AWS as the secure cloud service, is that the right way?

69
00:08:39,360 --> 00:08:45,400
These are the kinds of conversations that we need to be having, not just the binary conversation of it shouldn't or it should.

70
00:08:45,400 --> 00:08:47,340
The fact is that it is.

71
00:08:47,340 --> 00:08:50,980
And so we have to have that conversation about what this looks like moving forward.

72
00:08:51,040 --> 00:09:02,780
And really, that's the full circle of where we wanted to come to the voting village, which is really that we want feedback.

73
00:09:03,120 --> 00:09:19,580
We know so many of you have thought through these things and we want to provide that place where you can offer your advice and your feedback on how we can make these things the safest, the most secure, but ultimately the most accessible.

74
00:09:19,660 --> 00:09:23,840
Because that's the whole point of this thing in the first place.

75
00:09:24,200 --> 00:09:30,620
And to get really sentimental about voting, I mean, it is truly the bedrock of our representative democracy.

76
00:09:30,620 --> 00:09:42,740
If we still have significant barriers to voting, that whole piece, the integrity of that institution in itself is undermined.

77
00:09:42,740 --> 00:09:45,340
And so we want your feedback.

78
00:09:45,340 --> 00:09:54,780
And so if you have thoughts, questions about it even, please email us at securethevote at cyber-center.org.

79
00:09:54,780 --> 00:10:05,500
We also will have an RFI that's going to go live this month for solutions to some of these key issues like we talked through that are associated with mobile or online voting.

80
00:10:05,760 --> 00:10:15,160
So please email us to receive a notification when that goes live if you've got that next brilliant idea of how you think you can tackle a piece of this.

81
00:10:15,680 --> 00:10:16,380
Excellent.

82
00:10:16,480 --> 00:10:19,400
Well, a big thanks again to the Voting Village for having us.

83
00:10:19,620 --> 00:10:27,700
We want to thank you and just reaffirm that this issue is not just a security community issue.

84
00:10:27,700 --> 00:10:34,180
This goes out to all the different election officials, government organizations, nonprofits, and think tanks out there that are all working on this.

85
00:10:34,180 --> 00:10:39,360
Whether you're against it or for it is a component of this that we'll be driving into the future.

86
00:10:39,720 --> 00:10:43,500
And if it's going to happen, the best thing we can do is make it as secure as possible.

87
00:10:43,520 --> 00:10:44,400
So thank you.