Election infrastructure: independent security assessments.

Existing federal law charges various federal agencies with responsibilities related to the security of critical infrastructure, including election infrastructure. By Executive Order, the Governor directed the Office of Emergency Services to establish and lead the California Cybersecurity Integration Center, with its primary mission to reduce the likelihood and severity of cyber incidents that could damage California's economy, its critical infrastructure, or public and private sector computer networks in the state. Existing state law authorizes the Chief of the Office of Information Security in the Department of Technology to conduct, or require to be conducted, an independent security assessment of every state agency, department, or office, as specified. Existing state law also requires the Secretary of State and county elections official to perform specified tasks related to the security of voting systems, ballots, and other election materials. This bill would require the Office of Information Security in the Department of Technology, the Office of Emergency Services, and the California Military Department to establish a pilot program to conduct, or require to be conducted, an independent security assessment of election infrastructure that is accessible through an Internet connection in up to 5 counties that voluntarily choose to participate in the pilot program, as specified. The bill would require the Office of Information Security in the Department of Technology, the Office of Emergency Services, and the California Military Department to transmit the complete results of each independent security assessment and recommendations for mitigating system vulnerabilities, if any, to the elections official of the county in which the assessment was conducted and the Secretary of State. The bill would require these agencies to also prepare and submit a joint report to the Legislature regarding any assessments conducted. The bill would repeal these provisions on January 1, 2023.