Elections in the U.S. are administered by states and localities, but election infrastructure was designated critical infrastructure in 2017, bringing federal cybersecurity support to bear. The Cybersecurity and Infrastructure Security Agency (CISA) provides threat information, vulnerability scanning, training, and incident response to state and local election officials. The Election Assistance Commission (EAC) develops voluntary voting-system standards.
Concerns span foreign interference (Russian probing in 2016, ongoing nation-state activity), ransomware and other criminal threats, voter-registration database security, mis- and disinformation in the broader information environment, and physical security of election workers and facilities. Routine post-election audits and paper-ballot backup are widely cited as core resilience measures.
Debates after the 2020 election sharpened over CISA's role on disinformation, the boundary between cybersecurity assistance and content moderation, voter-roll maintenance, and the proper federal role in standards. Some states have welcomed federal coordination; others have grown skeptical.