The first president ial debate between president donald trump, and former Vice President joe biden. Tuesday september 29th in cleveland. Then they head to miami on the second event, october 15th. The third and final debate will take place thursday october 22nd in nashville tennessee. All the debates begin at 9 pm eastern, and you can watch them all live on cspan. You can also watch Live Streaming and on demand at cspan. Org. Or listen live with the free cspan radio app federal and state officials take part in the discussion on Voting Machines security. Ahead of the november elections, we also hear from the head of the cybersecurity on infrastructure security agency. Part of the recent burlington side with it good morning and welcome to this most Important Panel called election cybersecurity safeguards during the pandemic. It is a great pleasure to introduce to you this worldclass moderator and panel. We first introduce our moderator. Is the Vice President of Cybersecurity Services at raytheon intelligence and space where he oversees the strategy in operations for global team of over 6000 employees. His teams are responsible for delivering cybersecurity solutions, Global Training and logistics. And Product Support services in support of Critical Missions for government, agencies businesses. With him is chris well action. The Vice President of System Security and the chief Security Officer had elections systems and software. The largest provider of Elections Technology in the u. S. Easier to share with us all the improvements being made to Election Security to ensure secure accurate and audible elections. Matthew masterson currently serves as senior cybersecurity adviser at the department of Homeland Security. You previously served as a commissioner at the election assistance commission, to december 2014 to march 2018 including being the chairman in 2017, 2018. Trevor kim incest serve to the colorado secretary of state as chief Information Officer since 2007. Up to eight years as deputy ceo and director of software. Thank you very much for this panel. Thank you for listening, now i will turn it over to john. John . Thank you tom. Im very excited to be here with you with this distinguished panel and moderate is very important topic for the country today. I like the dive right into it. Matt as a deep expert in the area, id like you to set the stage for us. Very art of our democratic process revolves around the important results of these elections. My company understands the complex system of systems with the correct use of encryption trails and so on and so forth that gives users confidence in the outcome. Many ways elections represent a case study in insurance. It was 55 days left with the election, can you talk to us about how the government is addressing the reassurance needs of the systems . Absolutely john. Thank you for moderating this panel. For us at the cybersecurity agency, our focus for the people who are running elections in the private sector the system of systems is the perfect way to describe the election ecosystem. The reality is that many counties, the Election Office is the largest i. T. System. In the county. Theres so many pieces of infrastructure that exist at the state and local level for us our focus is to one making sure that they have access to timely and actionable both information and intelligence demand risks their systems. These are largely a resource challenge jurisdictions not just money wise but i. T. Wise. They dont always have fulltime eye to employees. Theyre relying on third parties to have that i. T. Support. Getting timely actionable information ought to understand the risk their system is critically important. The second step for us is providing support and services, we do everything from cyber hygiene scans. To penetrations tests to fishing campaigns to tabletop and architectural reviews, all to meet them where they are and provide them with tangible steps they could take, to shore up their systems and build resilience. Its not just about the fence, certainly thats a part of this but we recognize incidences will happen but how do they recover . The nice thing about us working with the Election CommunityElection Community are risk managers. They spend a lot of the time asking what you are on how do i respond to that and then when we talk to my voters about why the process remains intact. Thats been a natural conversation to be able to have. Recently there was an article about miami here or asteroid passing near earth on election day. I am sure they had a Response Plan to respond to that. For us its been an engagement around embracing that tendency, and characteristic of how to secure the system. As we look at 2020 versus 2016. In 2016 approximately 85 of votes cast had an audible record of some sort. Coming in 2020 early and 92 plus percent of votes cast a lot of that record. That is absolutely critical not just to the security of the process, but to what you talked about which is the assurance level. Now we need to focus on, how do we audit those records, and how do we do transparently so the public could have confidence in the votes cast. Thats a starting point for us in oregon through the state and local officials. Thank you. Trevor, the ceo of the state of colorado you have a unique system. All voters vote by mail. We have electronic polls for those who vote in person. Youre in the trenches at the state and local level. How do you manage voter identification with growing concerns of voter integrity in the election process, and avoid fraud or perception of fraud. Undermine confidence in the colorado election. Well a great question thanks don thank you tom for having this panel. Really starts at the front end. Theres three faces of election. Theres preparing for elections which means youre making sure the voters are registered. The citizens actually know they can be registered, a big part of that is getting the word out. Most states today have online ways of voters to check the registration and to register if they happen to not be registered. What update their address if they need to do so. Today we see a lot of states also providing ways for voters to indicate that they want to receive a male ballot. Colorado is one of the states where we mail ballots every active voter. It will appear in their mailbox, a few weeks before election. They could actually sit at their table market with a pen verify their choices, we have a way that they can reach out to us and requested replacement ballot. If theres sufficient time what made out that to them. The recent notice on the postal system in reliance on the postal system for mail ballots its kind of interesting. What ive seen, some of the media reporting spot how long it takes for ballot to do around trip. And the potential discrepancy and state laws and regulations for someone to request a male ballot way to close to election day. We try to avoid that thats how our state law is geared. We do think that ability to request a male ballot that is the first part of it. Its making that sure the voters know the elections coming up, where they can vote, either get a ballot whether its mail you could go and vote in person. And how to make sure their information is accurate. The accuracy of those systems that helps confidence in the voters. In the entire process. And every step along the way, if they could see the resiliency as masterson referred to, they can see the resiliency in the process that is in place, we think that helps support the conference in the voters. The second part is voting. Many states have early voting periods, whether its mail ballots being returned, whether its voters walking in and voting in person. Were on election day. Walking in and voting on election day. Thats that second stage. Afterwards, the the results reporting. We will see Election Night results. But many ballots will not be in the hands of the elected officials, or had been counted by tuesday at 7 pm. The laws in various states they differ. Whether its a postmark thats required by tuesday or whether it has to be in the hands of the elected official. That post election process in this year is every one of those areas, where one of those times where people are going to express concern. One of the things that Election Officials are talking about a lot, instead in the expectations of the voters in the media so that they could be prepared for probably not gonna know on tuesday at 7 pm. Were probably not gonna know tuesday in the middle of the night. We need to make sure all the expectations are said at the right level for this election. If you talk a little bit more about the integrity in validation and verification of the election polling system brings a male and . He thought a little bit about to get a view on how works in colorado and how it differs from state to state . The process is largely similar from state to state. When someone registered to vote, they might register a registration form, but when they show up to vote in person or request a male ballot they have to show proof of i. D. Thats federal law, that state law. States have various forms of i. D. That could be sufficient for verifying that you are you say you are. Its really making sure that authentication enters a shun. You are who you say you are by showing some might be, and you are authorized to vote a particular ballot. That means you live there. Depending on where you live in a state, you have a different state senator, given state representative indifferent mayor. And that sort of thing. That authorization to make sure you know who you are. Thats how they know they make sure you get the right ballot in front of you. It starts right there. Today, that information is validated by human beings. I do think in some point in the future will be some a point we could leverage some Electronic Technology to validate technology. The reality is today the systems that are in use, but people are showing up to vote requesting mail ballots, their identity is being verified by human being. Chris, as a former cia so far he chess, we have a unique understanding of the technology that underpins the democratic elections at the federal level. When you think has been the biggest technical challenges to secure the security and how do you work to mitigate them . Thanks for the question. Thank you for invent me to be a part of this panel. Voting machine security has evolved over the last 20 or 30 years. You could remember, if youre old like me the lever machines he would make selections our paper move levers and pulled down a big lever indicator choices after the 2000 election when we have a bill was passed, there was an influx of money and a lot of Technology Providers building electronic Voting Machines, so you dont have People Holding that punch cards trying to determine voter intent. The electronics for the time captured voter intent. Those machines did not provide a paper trail. In the last 15 years, election Technology Providers have moved forward to provide a paper trail, an audible method that voters could check their input so the Electronic Device before it is scanned in counted. Each of those generations of Election Technology at their own security issues. Today our industry, under the leadership of the election infrastructure subsequent 18 council. We have come together and really tried to move the ball forward when it comes to Election Technology security. We are sharing best practices, we are meeting with six to three times a month sometimes talking about the risks to Election Technology. Make sure we are doing all we can to ensure that the technology that voter interacts with at the polling place is secure. At the counting machines whether they are in the precinct or in the Election Central are secure. And then the results that are reported, are secure. Thats the first part. The second part, is the research and development the design, the requirements that go into building a voting machine. We collect those requirements from state and local Election Officials will know their voters best. One other jurisdictions best. And as the providers to meet those needs. We go throughout the general testing and verification process what were seeing to make sure each piece of technology thats in the field meets or exceeds the standards by which the ac has set forth and the Voting System test against. And then there are a number of admissions a number of states that do additional security testing. Over and above whatever the federal requirement is. So the election Technology Providers in our industry, are working with all of those stakeholders to make sure that the technology in used today, in the polling place in the Election Office and in the reporting and results from start to finish. Have the latest and greatest security built in. Or compensating controls for issues, or situations that may have not allowed for the inclusion of a batch. Or a control when the system was certified so we worked very hard to understand the risks, to our voting environment. We work with state and local Election Officials to get patches and updates out there, and then the proof is in the pudding. In the days leading up to elections election day, jurisdictions some jurisdictions are counting absentee ballots. And overseas ballots others are waiting till election day, but our industry as a whole is writing there, shoulder to shoulder with Election Officials. Making sure that votes are counted as cast. And that results can be trustworthy. Great thank you. Ill throw this out to the group, and whoever wants to jump in first. Im really interested in understanding what keeps you guys up at night, and what help you would need from the industry, or the government to address the concerns . Those concerns that are keeping you. Have whoever would like to jump in first. Ill jump in. Go for a. Trevor the confidence of voters in the process, this is what actually happened in 2016. There were a lot of assault on the confidence of voters in their fellow citizens. In the process, whether votes were going to be counted accurately. There were attempts to influence Public Opinion. And so division. Americans against americans. And thats one of those things, its not really a cybersecurity issue, it influences the entire environment that we work in. Im a technologist, ive done i. T. Work for a long time. Cybersecurity is table stakes, cybersecurity was table stakes 15 or 20 years ago. And so i dont mean at all to diminish the great work that system is providing to state and local jurisdictions. The fabulous help that the industry side gives to us with chris and his company and the other companies that are involved. I dont mean to diminish the risk of cybersecurity because if you have web accessible machine and needs to be secure you need to be secured you need to be regularly penn testing it in need to be testing it. Those are standard things for anyone that does anything on the internet. We work in a different environment where theres this huge aura of Public Opinion and Public Confidence that we have to work against i will tell you. If People Choose not to vote because they dont think the process is trustworthy. Then the bad guys have won. And thats really what it comes down to we need to do everything we can to show that were actually taking care of these things. Were doing the utmost to make sure the system is resilient. So that people can vote with confidence. Thats what its all about, get out and vote. I would just add to traverse point, whats been keeping me up at night at least this week. And it changes probably on a weekly basis. Have we, and are we doing everything we can add to support the state and locals,. The vast majority of jurisdictions in this country are mid to small jurisdictions, that really our challenge resource wide. They just need that support to understand where the risks lie. Understand what patches do i need in place, how do i segment my network . Implementing multi factor authentication . Its the next step in that conversation Election Officials have been securing the process for years. Theyve been its then how do i turn and talk to my voters . Am i insist and giving local Election Officials everything they need to turn and engage their voters. Particularly admits this pandemic. Election administration is not in the conversation nationally like it is right now, hardly ever. In my 13 years i rarely seen this. How are we sorting through the dynamic environment, the confusion, because we know uncertainty is a fertile developing ground for disinformation. How are we getting clear concise messaging out to voters, about both the steps that have been taken to secure the process. What their options are, and how they can engage, to be prepared, to be patient, and to participate in the process. As trump or said, the best response to all these attempts to undermine confidence, which was the adversary goal in 2016, which is an ongoing goal for multiple actors at this point. How do we get the information over and over again to voters, so that they say, okay i know where i can get what i need to understand if im registered. How what results are going to really look like, is the process secure, and that constant messaging i worry so much that were not doing enough to support this state local. To support the private sect