Election Security Risk Assessment

Specifications include, but are not limited to: 1.1.Penetration Testing:Provide penetration testing based upon industry best practice for those network facilities related to the election system:Election System External Wireless WANTheCounty’s Public Internet ConnectionElection System Communications ServerElection System File ServerElection System User PCsElection Results Web Page1.2.Vulnerability Scanning: Perform NESSUS Vulnerability Scansfor the systems and connections identified in Item 1.1 above1.3.Review processes, policies and procedures for those items listed below, as these relate to the election system, and provide recommendations for updates or improvements based upon industry best practice:User Access ControlChange ManagementEndpoint ProtectionSecurity Incident ManagementCounty Election Process and Procedure1.4.Provide a detailed report of findings, including mitigation recommendations based upon best practice.High-level summary of findingsDetailed technology security analysisElection process and procedureanalysisCompliance with standards set forth by the Wisconsin Elections Commission