Network Security — Election Security Glossary

Election network security covers the protection of data in transit: results flowing from precincts to central tabulation, registration records syncing between local and state databases, and election officials accessing back-office systems from county networks. Most modern election administration has a network component, even when the voting equipment itself is not networked.

Why this category matters for election security is that networks are an obvious place to attack. A well-placed network intrusion can intercept, alter, or disrupt the flow of data. Defending against such intrusions requires a layered approach: encrypted channels, authenticated endpoints, segmented networks, and continuous monitoring. None of these are election-specific. All of them have to be applied in the specific context of election operations, with their own constraints and rhythms.

Federal guidance from CISA and NIST provides the technical baseline. State and local implementations vary widely. Some jurisdictions have invested in modern segmented networks with strong encryption. Others depend on legacy systems that are harder to defend. The work of closing the gap is ongoing.

The terminology in this category covers both the technical mechanisms (encryption, segmentation, firewalls) and the specific contexts in which they are applied. The concepts here are not new. They have been the focus of network security practice for decades. What is specific is the way they are applied in election administration.