SECURE IT Act

HR 6315 (SECURE IT Act) requires federal election cybersecurity testing for voting systems and establishes a voluntary program for identifying vulnerabilities. It mandates accredited labs to conduct penetration testing on voting hardware/software within 180 days, and creates a 5-year pilot program where election system vendors can voluntarily share systems with vetted cybersecurity researchers. Researchers must report vulnerabilities to vendors and officials within 180 days, and vendors must provide fixes to election officials for critical issues, with patches reviewed by the Commission within 90 days. The bill grants legal protections for researchers under the Computer Fraud and Abuse Act and Digital Millennium Copyright Act, exempting vulnerability disclosures from public disclosure laws. This directly affects election system vendors, cybersecurity researchers, and state/local election officials managing election infrastructure.