iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
U.S. election offices can build a stronger security program by starting with an election-specific risk assessment, then using federal checklists, training, exercises, and physical-security guidance to address the risks that matter most to their jurisdiction. CISA’s resources are designed to support election officials and partners—not to certify that a system is secure or prescribe a single product.
Start with a jurisdiction-specific risk assessment
Begin by identifying the systems, facilities, people, and operational deadlines that are most important to your election. CISA and the U.S. Election Assistance Commission developed the Election Security Risk Profile Tool to help state and local officials understand election risks, focus on areas of greatest risk, and establish a basis for coordinating with federal, state, and local partners.
Use the assessment to prioritize actions rather than trying to address every possible threat at once. Local staffing, facility layout, system dependencies, election timing, and state or local procedures affect which safeguards are practical and urgent.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesProtect election systems from common cyber risks
CISA’s Cybersecurity Toolkit and Resources to Protect Elections groups guidance around phishing, ransomware, and distributed denial-of-service (DDoS) attacks. The agency identifies voter information—including electronic poll books and voter-registration databases—along with public websites, email, and election-office networks as common targets. An incident can confuse or delay voters, expose or block access to sensitive information, or disrupt systems during a critical operating period.
#1 Best Overall
- Phishing: Prepare staff to recognize suspicious messages and protect email accounts, which can be used to reach other election systems.
- Ransomware: Review protective controls and recovery plans so the office can respond if systems or data become unavailable.
- DDoS: Plan for availability problems affecting public-facing election websites and services, including how voters will find essential information if a site is disrupted.
The Election Infrastructure Cybersecurity Readiness and Resilience Checklist, dated September 6, 2024, offers question-based planning for election personnel and IT teams. It addresses networks and internet-facing applications supporting voter-registration information, election-night reporting, polling-place lookup, email, and other business operations. Treat it as a way to examine security posture and identify possible actions—not as a certification or guarantee.
CISA’s toolkit also cautions that the inclusion of commercial services does not mean the agency endorses them or has determined that they are suitable or effective for a particular jurisdiction. Evaluate any service against your own requirements and procurement process.
Rank #2
- Made in USA - Proudly produced in Ohio by a Veteran-owned business
- Comprehensive Coverage: This BookFactory log book includes essential fields such as post/shift, time of change, date, weather conditions, and a designated space for detailed notes. This ensures that all relevant information is captured and easily accessible.
- Sturdy Cover: The trans-lux cover protects the log book from wear and tear, ensuring its longevity and maintaining the integrity of your recorded data.
- Essential Security Tool: This log book is an indispensable tool for any organization that values security and accountability. It helps to prevent misunderstandings, improve communication, and ensure a smooth transition between shifts.
- Wire-O with Trans-lux cover, 100 Pages, Dimensions 8.5" x 11" - (Security-Pass-Down) Reorder SKU: LOG-100-7CW-PP(Security-Pass-Down)
Assess polling places and other election facilities
CISA’s Physical Security Checklist for Polling Locations, released April 22, 2024, is intended for temporary election facilities and for election workers and volunteers without prior security expertise. Its yes-or-no questions cover pre-planning and Election Day procedures and can help identify threats, incidents, and ways to improve local physical-security measures. Adapt it to the needs and resources of each facility.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
For broader facility guidance, the February 2024 CISA and FBI document Security Resources for the Election Infrastructure Subsector covers personnel threats and physical assets. Potential assessment sites include election offices, ballot-processing locations, storage areas, voting centers, and other facilities. CISA Protective Security Advisors can provide physical-security risk guidance and conduct assessments using the Security Assessment and First Entry (SAFE) tool.
Rank #3
The CISA and FBI summary advises election workers who receive threats to report them through law-enforcement channels and says to call 911 when there is an imminent threat to life. Follow the reporting procedures established by your jurisdiction.
Prepare staff and partners before an incident
CISA’s Election Security Training page lists no-cost training for election infrastructure stakeholders. Topics include election security, phishing and ransomware awareness, insider-threat mitigation, operational security, communications planning, and non-confrontational techniques for election workers. CISA says training can be customized, delivered virtually or in person, and usually takes 30 to 90 minutes.
Rank #4
- Made in USA - Proudly produced in Ohio by a Veteran-owned business
- This BookFactory log book is for security guards in any sector or business. You can report location, circumstances and report number.
- There are spaces to log the individual's names address, description and other identifying information. There are also spaces to note others involved, notes, and vehicle information if one was involved
- Wire-O, 100 Pages, Dimensions 3.5" x 5.25"
- Reorder SKU: LOG-100-M3CW-PP(Security-Report)
Training is most useful when participants know which systems and procedures apply to their roles. Include relevant election staff and partners, and connect the lessons to local escalation and communications plans.
Use a tabletop exercise to clarify response roles
CISA’s Elections Cyber Tabletop in a Box provides template objectives, a scenario, discussion questions, and cybersecurity references. Use the materials to discuss whether plans, responsibilities, and communications are clear before an incident occurs. A tabletop is a discussion exercise; it does not technically test systems or prove operational readiness.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Include the full election supply chain
CISA’s Supply Chain Risks to Election Infrastructure Subsector Infographic identifies four categories to consider in supply-chain reviews:
- Hardware used in election operations.
- Software that supports systems and workflows.
- Services relied on by election offices or system providers.
- Paper supplies needed to carry out election operations.
Looking across all four categories helps offices consider supplier dependencies beyond voting equipment. Use jurisdictional purchasing and risk-review processes; the infographic does not establish a particular vendor, product, or procurement requirement.
Choose resources by risk, scope, and delivery
These resources serve different purposes. Match the tool to the gap your assessment identifies, and verify current availability and eligibility with the provider.
Free tools Windows power users keep installed
One-click scans. No signup required.
| Resource | Primary focus | Format |
|---|---|---|
| Election Security Risk Profile Tool | Election risks and coordination priorities | Risk assessment tool |
| Cybersecurity Readiness and Resilience Checklist | Cybersecurity posture and planning for possible incidents | Question-based checklist |
| Physical Security Checklist for Polling Locations | Temporary polling-facility security | Yes-or-no checklist |
| Security Resources for the Election Infrastructure Subsector | Personnel threats and physical assets | Guidance; CISA Protective Security Advisor support may include assessment |
| Election Security Training | Staff awareness, operational security, and communications | Customizable virtual or in-person training |
| Elections Cyber Tabletop in a Box | Incident plans, responsibilities, and coordination | Facilitated discussion materials |
| Supply Chain Risks infographic | Hardware, software, services, and paper supplies | Infographic framework |
CISA describes its training as no-cost. Its CISA and FBI summary also describes no-cost services from the Multi-State Information Sharing and Analysis Center (MS-ISAC) for eligible U.S. public entities; check current eligibility and availability directly. Federal resources complement, rather than replace, jurisdiction-specific procedures and planning.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
