CISA's Role In Safeguarding the Vote

In this episode, we tackled a timely and pressing topic: the integrity and security of our voting systems. With election season upon us, the need for trust in the voting process and confidence in election cybersecurity has never been more critical.

Historically, skepticism surrounding election security has spanned decades, but in recent years, digital interference and the spread of disinformation have intensified public concern. From the notorious 2016 election cycle to more recent events, questions surrounding the security of voting technology are common. However, steps taken by the Cybersecurity and Infrastructure Security Agency (CISA) have been instrumental in addressing these issues and protecting the voting infrastructure.

As Shannon Tynes highlighted, CISA wasn't established until 2016, born out of a need to counteract misinformation and cyber threats to critical infrastructure. In a relatively short time, CISA has made significant strides in reinforcing voter confidence, educating the public, and securing election systems. Recent statements by CISA's director, Jen Easterly , emphasize the agency's commitment to these goals. According to Easterly, CISA is actively working to assure voters that U.S. election systems are secure and designed to protect against interference.

But while we place a strong emphasis on securing these systems, we also acknowledge that the threats are evolving. As Daniel Acevedo noted, overconfidence in security ("hack-proof" claims) can inadvertently challenge threat actors to try to breach these systems. Yet, adopting robust defenses, such as air-gapped systems and segmented networks, remains effective. These protections are a solid foundation for election infrastructure and serve as a model for safeguarding other high-risk sectors like healthcare and power grids.

Chris Abacon shared his experience voting early in his county and noted that his polling location used air-gapped devices from Election Systems & Software. These machines, designed with rigorous security protocols, function offline and require stringent accuracy standards. The collaboration between local jurisdictions and agencies like CISA reinforces election security and builds a system resilient to cyber interference. However, we should remain mindful that this infrastructure varies across regions and is often subject to budget constraints. As I pointed out, while CISA oversees federal cybersecurity, local jurisdictions also play an essential role in implementing secure and unbiased voting practices.

Despite the robustness of these systems, disinformation continues to be a challenge. Social media has amplified the spread of misinformation, a tool adversaries use to create confusion and doubt in the electoral process. "A divided United States is good for our adversaries," Chris remarked, underscoring the importance of CISA’s work in fighting disinformation. Public education and transparency remain critical in combating the negative impact of misinformation.

In closing, we encourage every eligible voter to participate in the democratic process. Protecting our election systems isn’t just about the technology—it's about sustaining trust and engagement. CISA and local authorities are working tirelessly to maintain election integrity. As I said in the podcast, “Jen Easterly has been a boon for national cybersecurity, and I feel confident that our voting systems are prepared.”

Thank you for reading, and stay tuned for more episodes of The Other Side of the Firewall podcast on Monday, Tuesday, Wednesday, and Fridays, as well as the Ask A CISSP podcast every Thursday. Please like, share, and subscribe.

Stay safe, stay secure!

Ryan is a retired Air Force veteran who brings over 20 years of experience in network infrastructure, project management, and cybersecurity consulting to his current roles as CEO of RAM Cyber Consulting & Assessments, LLC and IT Security Analyst at BuddoBot . Buddobot’s mission is to support national security by transforming, empowering, and educating organizations to shift from reactive, diluted, automated, and high-cost IT and security practices to proactive, effective solutions that fortify their security.

Shannon, also a retired Air Force veteran, has more than two decades of expertise in network security and vulnerability management. He now serves as an Information System Security Officer (ISSO) for the U.S. Space Force, where he continues to enhance national security protocols.

Chris, a Navy veteran with over ten years in IT, information assurance, and risk management, currently works at CompliancePoint . His roles include vCISO, RMF assessor, and consultant, focusing on enhancing data security and privacy for various organizations.

Daniel is an Air Force veteran with over 15 years of combined experience in IT, cybersecurity, information assurance, and government risk compliance. He has held various roles, including IT administrator, cybersecurity engineer, senior information system security manager, and currently serves as a senior security consultant for Booz Allen Hamilton. In this latest role, Daniel leverages his expertise to address unique and complex challenges in the cyber and IT domains, enhancing his customers’ capabilities.

**The Other Side of the Firewall podcast is a product of RAM Cyber Consulting & Assessments, LLC . RAM Cyber Consulting & Assessments, LLC is a premier governance, risk, and compliance (GRC) consultancy dedicated to supporting the Defense Industrial Base (DIB), federal agencies, and corporate entities. We specialize in delivering expert guidance to ensure compliance, mitigate risks, and enhance cybersecurity postures. RAM Cyber is pending SDVOSB, VOSB, and 8(a) certification by the SBA, underscoring our commitment to excellence and service.