The Independent View: Call the National Guard to Protect Election Hacking

Best known for responding to Hurricanes and Tornadoes with “Weekend Warriors,” the National Guard has been building its Cyber-Defense Expertise, in part with Volunteers whose regular Jobs involve Advanced Technology. By next year, it aims to have Cyber Units in 38 States, with some 3,800 Soldiers and Airmen. With regard to Election Security, “there’s room to grow there in the unique space that the National Guard has as a state asset,” General Joseph Lengyel, Chief of the Pentagon’s National Guard Bureau, told the House Appropriations Committee this month.

The Guard’s largely Part-Time Forces can bring to the task may have some Gaps. The Arkansas National Guard, for instance, says the State doesn’t have an Operational Cyber Team yet. The Defense Department has Failed to maintain a required “database that identifies the National Guard units’ cyber-related emergency response capabilities,” according to a September 2016 Report by the Government Accountability Office.

A 2017 RAND Corp. Report estimated that the Army National Guard and Army Reserve have more than 100,000 People with some Cyber Competence, though that number represents everything from Basic Information Technology know-how to more specific Units Trained in Cybersecurity. “The National Guard needs to be ready to respond to a wide variety of disasters that come up,” said Maurice Turner, Senior Technologist at the Center for Democracy and Technology in Washington. “So getting them on board and developing a response to an election disaster is new territory.”

But the Guard brings one inarguable benefit for States: It’s available quickly. By Law, the Federal Government can deploy the Army and Air National Guard in U.S. Missions Overseas. Governors can oversee Guard Soldiers who help out with large disasters like hurricanes, while the Feds pay for it. State-level Cyber Assistance falls under “state active duty” Status: States foot the Bills and Control the Forces.

Department of Homeland Security (HHS) Officials haven’t taken a formal Public position on the use of the National Guard, but they have said they welcome any additional Cyber help States get to Improve their systems. West Virginia’s Secretary of State Mac Warner, who spent 23 years in the U.S. Army and later worked as a Military Contractor in Afghanistan, says the Guard Airman who’s poring over his Election Networks brings another Key Asset to the Task of Security Clearance.

Some State Election Officials looking to Combat Cyber Threats have expressed Frustration over the pace at which Federal Authorities Grant Clearances. After taking Office, Warner wanted a faster way to get Classified Information from Federal Sources. His Office plucked an Airman from the Guard and covers his Salary as the State gears up for its May 8th Primary Elections.

The National Guard Bureau doesn’t keep a List of how State Units are helping with Election Security. But a quick, rough Survey shows some of the efforts underway.

- Colorado, Guard Soldiers with Cybersecurity backgrounds will help Monitor Networks on Election Day in November, said Trevor Timmons, Chief Information Officer for the Secretary of State’s Office in Denver.

- Ohio and Oregon, say Guard Soldiers are helping with Election Security, but won’t provide details.

- Rhode Island, the Guard did a Vulnerability Assessment of the State’s New Electronic Poll Book System that contains Voter Lists during a Special Election in January and reviewed the State’s Election-Management Network and Voting Machines, Secretary of State Nellie Gorbea said.

- Washington Officials say they’re in talks with Guard Officials about how Units could support Cyber and Physical Security.

- Wisconsin where the Guard is providing Input for an Assessment of Election systems under the State’s Homeland Security Council.

The extra help can benefit States with tight budgets and small Information Technology Staffs. But there’s still an Elections learning curve for Guard Soldiers to overcome, said Larry Norden, Deputy Director of the Democracy Program at the Brennan Center for Justice in New York. “The value of cybersecurity guidance is going to depend on an understanding of the mechanics of elections,” He said. “Merely throwing a bunch of ‘tech’ people at a problem isn’t going to magically secure everything.”

Nonetheless, Guard Experts have already demonstrated their value in South Carolina, where State Officials are still making Improvements to their Election Systems based on Guard Assessments from 2016 on Voting and Voter-Registration systems as well as Physical Security in each of the State’s 46 Counties. “We consider them part of our security team,” says Chris Whitmire, a spokesman for the South Carolina State Election Commission. Duncan Buell, a Computer Science Professor at the University of South Carolina, reviewed redacted copies of the Guard’s County-Level Reports, and he was encouraged to see the Guard Soldiers studying such aspects as the Counties’ Protocols for Servers and File Transfers. “Pretty much every county got really strongly negative reports -- virtually every county has high vulnerabilities or critical vulnerabilities across the board” in the 2016 Assessments, Buell said. “They weren’t just whitewashing.”