In 2018, The United States Congress, in conjunction with the National Security Agency and the Department of Homeland Security, directed the Secretaries of State to perform an assessment. We were chosen to partner with Clark State Community College to assist in our local Clark County Board of Elections assessment.
A unique opportunity to take an inside look at a cybersecurity professional's contribution to election security.
In today's digital age, cybersecurity has become a crucial aspect of everyday life. The integrity of our democratic processes, including elections, relies heavily on the effective implementation of cybersecurity measures. One such instance where cybersecurity played a critical role in ensuring the security of the election process was the 2018 Ohio Election Audit. In this article, we take an inside look at the key contributions of Capstone Technologies Group and its owner, Brian Sammons. Unlike most security audits where disclosure and comments are prohibited by non-disclosure agreements, the role of the expert in this process can be openly discussed due to the press coverage, providing valuable insights into the world of cybersecurity and its impact on society.
The 2018 Ohio Election Audit
In response to growing concerns about election security, the United States Congress, in collaboration with the National Security Agency (NSA) and the Department of Homeland Security (DHS), directed the Secretaries of State to perform an assessment of their election systems. In Ohio, the local government partnered with Clark State Community College to assist in the Clark County Board of Elections assessment. Clark State is certified by the DHS and NSA as National Centers of Academic Excellence in Cyber Defense (CAE-CD) or CAE2Y (DHS/NSA)
Without the experience and skills that Capstone Technologies Group provided, this audit would not have been possible.
A Unique Collaboration
In late August 2018, Professor Dan Heighton from Clark State reached out to Capstone Technologies Group. Recognizing Brian's vast experience in offering security and compliance guidance and documentation to clients (HIPAA, PCI DSS, NIST, CMMC), Professor Heighton expressed his confidence in the value Capstone Technologies Group would bring to the Pathfinder team being formed for the election audit project.
The Process and Contributions
As part of a four-person team, Brian utilized a Center for Internet Security (CIS) generated 88-point checklist called the Elections Infrastructure Playbook to identify areas where IT and security improvements could be made. His wealth of experience played a vital role in the assessment process, providing a deep understanding of the potential risks and vulnerabilities within the election system.
During the assessment, the team made multiple in-person visits to the Board of Elections offices, gathering materials and documenting findings. Over the course of the next month, they met several times to discuss the documentation, findings, and observations. Brian’s expertise allowed him to provide valuable insights and recommendations to improve the overall security posture of the election system.
The Result
Capstone Technologies Group and the team presented their findings, conclusions, and recommendations regarding the cybersecurity posture to the Clark County Board of Elections prior to the November 2018 elections. Their combined efforts helped identify and address potential vulnerabilities, ensuring the security and integrity of the election process.
Why Companies Should Choose Capstone Technologies Group
The 2018 Ohio Election Audit serves as a prime example of the value that Capstone Technologies Group can bring to an organization or project. Companies seeking to bolster their security posture should consider the following benefits of working with this experienced team:
- In-depth understanding of evolving threats: With years of experience, Capstone Technologies Group has witnessed firsthand the evolution of cyber threats, enabling them to better anticipate and mitigate potential risks.
- Expertise in compliance and regulations: Extensive experience in providing security and compliance guidance (HIPAA, PCI DSS, NIST, CMMC) ensures a comprehensive approach to addressing all aspects of an organization's cybersecurity needs.
- Proven track record: The involvement in the high-profile 2018 Ohio Election Audit, as well as the numerous undisclosed security audits performed for clients under strict NDAs, demonstrates the ability to handle sensitive and critical projects effectively while maintaining confidentiality.
- Adaptability: Capstone Technologies Group has developed the skills and knowledge to adapt to the ever-changing landscape of cybersecurity threats and technology.
Conclusion
The 2018 Ohio Election Audit highlights the importance of cybersecurity in protecting the integrity of our democratic processes. Capstone Technologies Group played a significant role in ensuring the security of the 2018 elections in Ohio. Their collaboration with local government and educational institutions showcased their dedication to the cause and their ability to make a meaningful impact on the community.
By choosing Capstone Technologies Group for their cybersecurity needs, companies can benefit from the wealth of knowledge and experience that this team brings to the table. Their proven track record in high-profile projects, such as the 2018 Ohio Election Audit, demonstrates their ability to address complex security challenges while remaining adaptable in the face of an ever-evolving cyber threat landscape.
In conclusion, the 2018 Ohio Election Audit exemplifies the importance of strong cybersecurity measures in safeguarding our democratic institutions. Capstone Technologies Group has showcased their expertise in this field and their commitment to making a positive impact on the world. As cybersecurity threats continue to evolve and grow, partnering with a reliable and experienced firm like Capstone Technologies Group can provide organizations with the necessary tools and guidance to protect their valuable digital assets and maintain the trust of their stakeholders. This unique collaboration between the government, academia, and a private cybersecurity firm serves as a prime example of how combined efforts can lead to a more secure and resilient society.
Media Mentions
Below are some articles talking about the audit
