© 2022 NPR Illinois
Stand with the Facts
Play Live Radio
Next Up:
0:00
0:00
Available On Air Stations
Click here to be "In the know." Subscribe to the NPR Illinois Daily newsletter.

Audit Questions Cybersecurity At Illinois State Board Of Elections

Illinois State Board of Elections
Brian Mackey
/
NPR Illinois

An audit is criticizing cybersecurity practices at the Illinois State Board of Elections, but the board is taking issue with some of the findings.

The audit criticizes the board for not doing enough to reduce the risk of a hack, and for not having cybersecurity training when new people are hired and every year after that.

But spokesman Matt Dietrich says elections personnel are “very well trained.”

“We all have cybersecurity training here and safe data handling training here, and we have reminders everywhere throughout this office about the dangers of something as simple as clicking on a bad link in an email,” Dietrich says.

He also says the board has “robust” security measures in place, and has created a "cyber navigator" program to assist local election officials with improving cybersecurity.

“In the last two years alone, we have added four new staff members who are devoted strictly to cybersecurity,” Dietrich says.

All this comes after the Russian military hacked the board’s statewide voter registration database in 2016, downloading information on tens of thousands of voters.

There were two other audit findings the board did accept: that it needs to classify data based on which is the most susceptible to attack, and to come up with formal cybersecurity policies.

The summary and full versions of the audit are on the website of the Illinois auditor general.

Brian Mackey formerly reported on state government and politics for NPR Illinois and a dozen other public radio stations across the state. Before that, he was A&E editor at The State Journal-Register and Statehouse bureau chief for the Chicago Daily Law Bulletin.
Related Stories