nach oben

Erschienen in:

2023 | OriginalPaper | Buchkapitel

Business Continuity Planning (BCP) for Election Systems

verfasst von : David Stevens, Richard Halverson

Erschienen in: HCI for Cybersecurity, Privacy and Trust

Verlag: Springer Nature Switzerland

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config

KI-gestützte Suche

Aus

Abstract

Governments are embracing IT at an ever-increasing pace, incorporating technology into their critical infrastructure, and bringing cybersecurity to the forefront as policymakers balance system availability and convenience with privacy and security. However, achieving this balance can be challenging when planning for unforeseen circumstances during an election. In the United States, although there is guidance at the national level, plans to deliver election services during a cyber or physical attack or disaster are left up to each state and local jurisdiction. This paper covers a brief history of disaster recovery and business continuity planning. We then examine election systems as a critical system in the United States and discuss the status of each state’s ability to respond to and plan for election system emergencies or failures during an election. Finally, we recommend promoting a more unified approach to business continuity planning (BCP) for election systems.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Vorheriges Kapitel I Just Want to Help: SMEs Engaging with Cybersecurity Technology

Nächstes Kapitel Cybersecurity as Part of Mission Assurance

Brown, M., Forson, L., Hale, K., Smith, R., Williamson, R.D.: Capacity to address natural and man-made vulnerabilities: the administrative structure of US election system security. Election Law J.: Rules Polit. Policy 19(2), 180–199 (2020). https://doi.org/10.1089/elj.2020.0626CrossRef

Dekker, A.H.: Simulating network robustness for critical infrastructure networks. In: Proceedings of the Twenty-Eighth Australasian Conference on Computer Science, vol. 38, pp. 59–67 (2005)

U.S. pipeline system, Washington Post (2021). https://www.washingtonpost.com/business/2021/05/08/cyber-attack-colonial-pipeline/

US Election Assistance Commission, “Starting Point: US Election Systems as Critical Infrastructure” (n.d.). https://www.eac.gov/sites/default/files/eac_assets/1/6/starting_point_us_election_systems_as_Critical_Infrastructure.pdf

H. R. 3162, 107th Cong., “Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA Patriot) Act” (2001). https://www.congress.gov/107/plaws/publ56/PLAW-107publ56.pdf

Department of Homeland Security, “National Infrastructure Protection Plan (NIPP) 2013: Partnering for Critical Infrastructure Security and Resilience”, p. 12 (2013). https://www.dhs.gov/sites/default/files/publications/National-Infrastructure-Protection-Plan-2013-508.pdf

Presidential Decision Directive 63, “SUBJECT: Critical Infrastructure Protection” (1998). https://fas.org/irp/offdocs/pdd/pdd-63.htm

Hayhoe, G.F.: Managing in a post-9/11, post-Katrina world: an introduction to disaster-recovery planning for technical communicators, pp. 34–36 (2006). https://doi.org/10.1109/IPCC.2006.320367

Fong, K.: Contingency planning and disaster recovery. In: Proceedings of the 1984 Annual Conference of the ACM on the Fifth Generation Challenge, p. 256 (1984). https://doi.org/10.1145/800171.809643

10.

Landry, B.J.L., Koger, M.S.: Dispelling 10 common disaster recovery myths: lessons learned from Hurricane Katrina and other disasters. J. Educ. Resour. Comput. 6(4), 6-es (2006). https://doi.org/10.1145/1248453.1248459

11.

Saleem, K., Luis, S., Deng, Y., Chen, S.-C., Hristidis, V., Li, T.: Towards a business continuity information network for rapid disaster recovery. In: Proceedings of the 2008 International Conference on Digital Government Research, pp. 107–116 (2008)

12.

Blythe, B.: Blindsided: A Manager’s Guide to Catastrophic Incidents in the Workplace. Portfolio (2002)

13.

IBM Services. “Adapt and respond to risks with a business continuity plan (BCP)” (2021). https://www.ibm.com//services/business-continuity/plan

14.

National Conference of State Legislatures. “Election Emergencies” (2017). https://www.nass.org/sites/default/files/Election%20Cybersecurity/report-NASS-emergency-preparedness-elections-apr2017.pdf

15.

National Conference of State Legislatures. “Voting Outside the Polling Place: Absentee, All-Mail and other Voting at Home Options” (2020). https://www.justia.com/covid-19/50-state-covid-19-resources/elections-during-covid-19-50-state-resources/

16.

Cybersecurity and Infrastructure Security Agency (CISA). “Protect2020 Strategic Plan” (2020). https://www.cisa.gov/sites/default/files/publications/ESI%20Strategic%20Plan_FINAL%202.7.20%20508.pdf#page=1&zoom=auto,-271,798

17.

Election Assistance Commission. “Requirements for the Voluntary Voting System Guidelines 2.0” (2021). https://www.eac.gov/sites/default/files/TestingCertification/Voluntary_Voting_System_Guidelines_Version_2_0.pdf

18.

Merrill, et al.: “State Laws & Practices for the Emergency Management of Elections: Report of the NASS Task Force on Emergency Preparedness for Elections, Released February 2014; Updated April 2017” (2017). https://www.nass.org/sites/default/files/surveys/2019-07/report-NASS-emergency-preparedness-elections-apr2017.pdf

19.

National Institute of Standards and Technology (NIST) Cybersecurity Assessment Framework (CSF) (n.d.). https://www.nist.gov/itl/smallbusinesscyber/nist-cybersecurity-framework

20.

Payment Card Industry Security Standards Council. “Payment Card Industry Data Security Standard (PCI DSS)” (n.d.). https://www.pcisecuritystandards.org/document_library

21.

International Standards Organization (ISO). “ISO standards 22301, 22313, 27001” (n.d.). https://www.iso.org/standards.html

22.

US Securities and Exchange Commission. “Settlement Agreement Between Heartland Payment Systems, Inc. and Mastercard” (2010). https://www.sec.gov/Archives/edgar/data/1144354/000119312510124368/dex101.htm

23.

US Department of Health and Human Services (HHS). “Health Insurance Portability and Accountability Act (HIPAA)” (n.d.). https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html

24.

Cybersecurity Maturity Model Certification Accreditation Board (CMMC-AB). “The Cybersecurity Maturity Model Certification” (n.d.). https://cmmcab.org/cmmc-standard/

25.

California Consumer Protection Act (CCPA) (2018). https://www.oag.ca.gov/privacy/ccpa

26.

National Institute of Standards and Technology (NIST). “special publications 800-34, 800-171, 800-53” (n.d.). https://csrc.nist.gov/publications

27.

US Department of State Directorate of Trade Controls International Trafficking of Arms Requirements (ITAR) (n.d.). https://www.pmddtc.state.gov/?id=ddtc_kb_article_page&sys_id=24d528fddbfc930044f9ff621f961987

Titel: Business Continuity Planning (BCP) for Election Systems
verfasst von: David Stevens
Richard Halverson
Verlag: Springer Nature Switzerland
Buch: HCI for Cybersecurity, Privacy and Trust
Print ISBN: 978-3-031-35821-0

Electronic ISBN: 978-3-031-35822-7

Copyright-Jahr: 2023
DOI: https://doi.org/10.1007/978-3-031-35822-7_24

Springer Professional

Abstract

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"