Audit Finds Cybersecurity Gaps but Affirms Overall Integrity of Utah Elections

Utah Elections: Audit Finds Cybersecurity Gaps Affirms Integrity | CyberPro Magazine

A recent audit of Utah Elections infrastructure has confirmed that the state’s electoral process remains secure, while identifying a few areas where cybersecurity could be enhanced. The findings were presented at the Government Operations Interim Committee meeting held Wednesday morning. Conducted by state auditors, the report was framed as a proactive measure to ensure continual improvements in election security, rather than a response to any imminent threat.

Jake Dinsdale, the senior audit supervisor leading the investigation, assured lawmakers and the public that Utah’s election system is fundamentally sound. “There’s a lot more going right with elections in Utah than wrong,” Dinsdale said, underscoring the intent of the audit as a constructive tool for further strengthening safeguards. The assessment joins a series of reports aimed at identifying opportunities for better practices in the state’s governance systems.

Utah Elections Wireless Capabilities and Access Controls Raise Red Flags

The audit’s primary concerns revolved around two key areas- wireless connectivity risks and user access permissions. One significant finding noted that an Utah elections server in one county was built using an off-the-shelf laptop, which included wireless components. Although the device had been configured to block internet access in compliance with existing rules, the audit flagged the mere presence of Wi-Fi hardware as a potential vulnerability. The concern lies in the theoretical ease with which such components could be re-enabled, allowing prohibited internet access.

As a preventative measure, auditors suggested strengthening current statutes, not only banning internet connections for voting equipment but also prohibiting the hardware capability itself. “We believe it could strengthen our system to prohibit the capability for connection,” Dinsdale emphasized.

The audit also revealed that some election workers had more system privileges than necessary for their roles. Elevated permissions could, in rare but concerning scenarios, be exploited by malicious actors to alter voting systems. While no such incidents were found, the report recommended tighter access controls, more frequent password updates, and greater reliance on system logs and security cameras to safeguard critical operations.

County Clerks Welcome Independent Oversight

Representing Utah’s 29 county clerks, Weber County Clerk and Auditor Ricky Hatch praised the audit, describing it as a valuable and objective review of the electoral process. “One reason why we’re so glad to have this audit is because it was an objective way for folks to come in and take a look at the guts of the system,” Hatch said. He noted the expertise of the auditors and welcomed their findings as a chance to build trust and transparency in the state’s elections.

The audit did not uncover any breaches or systemic failures but instead offered practical steps to ensure the continued integrity of the election process. The combination of sound procedures and the willingness to improve is being viewed as a model for responsible governance, with state officials and local clerks committed to implementing the recommendations in time for future elections.

LinkedIn
Twitter
Facebook
Reddit
Pinterest