International Foundation for Electoral Systems
Contents
I.
Introduction .......................................................................................................................................... 3
II.
Literature Review .................................................................................................................................. 5
a)
International and Regional Standards for Cybersecurity in Elections .............................................. 5
b)
Best Practice Guidelines for Implementing Election Technology ..................................................... 8
c)
Cybersecurity Instruments and Frameworks .................................................................................. 12
d)
Election Observer Guidelines .......................................................................................................... 13
e)
Case Law.......................................................................................................................................... 15
III. Types of Exposure that Can Impact Cybersecurity ............................................................................. 19
a)
Technology Exposure ...................................................................................................................... 19
b)
Human Exposure ............................................................................................................................. 20
c)
Political Exposure ............................................................................................................................ 22
d)
Legal Exposure ................................................................................................................................ 24
e)
Procedural Exposure ....................................................................................................................... 26
IV. Holistic Exposure and Adaptation Testing (HEAT) Process ................................................................. 27
a)
What Is a HEAT Process and What Is It Not? .................................................................................. 27
b)
Outlining the HEAT Process ............................................................................................................ 29
Identify .................................................................................................................................................... 29
Collect ..................................................................................................................................................... 30
Expose ..................................................................................................................................................... 31
Exploit ..................................................................................................................................................... 32
Adapt ....................................................................................................................................................... 32
V.
2
Conclusions ......................................................................................................................................... 33