DHS’S PROGRESS IN SECURING ELECTION SYSTEMS AND OTHER CRITICAL INFRASTRUCTURE HEARING BEFORE THE COMMITTEE ON HOMELAND SECURITY HOUSE OF REPRESENTATIVES ONE HUNDRED FIFTEENTH CONGRESS SECOND SESSION JULY 11, 2018 Serial No. 115–70 Printed for the use of the Committee on Homeland Security Available via the World Wide Web: http://www.govinfo.gov U.S. GOVERNMENT PUBLISHING OFFICE 33–942 PDF WASHINGTON : 2019 VerDate Mar 15 2010 15:40 Jan 03, 2019 Jkt 000000 PO 00000 Frm 00001 Fmt 5011 Sfmt 5011 H:\115TH CONGRESS\18FL0711\18FL0711 HEATH Congress.#13 COMMITTEE ON HOMELAND SECURITY MICHAEL T. MCCAUL, Texas, Chairman LAMAR SMITH, Texas BENNIE G. THOMPSON, Mississippi PETER T. KING, New York SHEILA JACKSON LEE, Texas MIKE ROGERS, Alabama JAMES R. LANGEVIN, Rhode Island LOU BARLETTA, Pennsylvania CEDRIC L. RICHMOND, Louisiana SCOTT PERRY, Pennsylvania WILLIAM R. KEATING, Massachusetts JOHN KATKO, New York DONALD M. PAYNE, JR., New Jersey WILL HURD, Texas FILEMON VELA, Texas MARTHA MCSALLY, Arizona BONNIE WATSON COLEMAN, New Jersey JOHN RATCLIFFE, Texas KATHLEEN M. RICE, New York DANIEL M. DONOVAN, JR., New York J. LUIS CORREA, California MIKE GALLAGHER, Wisconsin VAL BUTLER DEMINGS, Florida CLAY HIGGINS, Louisiana NANETTE DIAZ BARRAGA´ N, California THOMAS A. GARRETT, JR., Virginia BRIAN K. FITZPATRICK, Pennsylvania RON ESTES, Kansas DON BACON, Nebraska DEBBIE LESKO, Arizona BRENDAN P. SHIELDS, Staff Director STEVEN S. GIAIER, General Counsel MICHAEL S. TWINCHEK, Chief Clerk HOPE GOINS, Minority Staff Director (II) VerDate Mar 15 2010 15:40 Jan 03, 2019 Jkt 000000 PO 00000 Frm 00002 Fmt 5904 Sfmt 5904 H:\115TH CONGRESS\18FL0711\18FL0711 HEATH C O N T E N T S Page STATEMENTS The Honorable Michael T. McCaul, a Representative in Congress From the State of Texas, and Chairman, Committee on Homeland Security: Oral Statement ..................................................................................................... 1 Prepared Statement ............................................................................................. 2 The Honorable Bennie G. Thompson, a Representative in Congress From the State of Mississippi, and Ranking Member, Committee on Homeland Security: Oral Statement ..................................................................................................... 3 Prepared Statement ............................................................................................. 37 The Honorable Sheila Jackson Lee, a Representative in Congress From the State of Texas: Prepared Statement ............................................................................................. 38 WITNESSES Mr. Christopher C. Krebs, Under Secretary, National Protection and Pro- grams Directorate, U.S. Department of Homeland Security: Oral Statement ..................................................................................................... 42 Prepared Statement ............................................................................................. 43 Ms. Nellie M. Gorbea, Secretary of State, State of Rhode Island: Oral Statement ..................................................................................................... 49 Prepared Statement ............................................................................................. 51 FOR THE RECORD The Honorable Bennie G. Thompson, a Representative in Congress From the State of Mississippi, and Ranking Member, Committee on Homeland Security: Letters ................................................................................................................... 5 Press Releases ...................................................................................................... 23 Documents ............................................................................................................ 33 APPENDIX Questions From Honorable John Katko for Christopher C. Krebs ...................... 89 Questions From Honorable John Ratcliffe for Christopher C. Krebs .................. 90 Questions From Honorable James R. Langevin for Christopher C. Krebs ......... 90 (III) VerDate Mar 15 2010 15:40 Jan 03, 2019 Jkt 000000 PO 00000 Frm 00003 Fmt 5904 Sfmt 5904 H:\115TH CONGRESS\18FL0711\18FL0711 HEATH VerDate Mar 15 2010 15:40 Jan 03, 2019 Jkt 000000 PO 00000 Frm 00004 Fmt 5904 Sfmt 5904 H:\115TH CONGRESS\18FL0711\18FL0711 HEATH DHS’S PROGRESS IN SECURING ELECTION SYSTEMS AND OTHER CRITICAL INFRA- STRUCTURE Wednesday, July 11, 2018 U.S. HOUSE OF REPRESENTATIVES, COMMITTEE ON HOMELAND SECURITY, Washington, DC. The committee met, pursuant to notice, at 10:31 a.m., in room HVC–210, Capitol Visitor Center, Hon. Michael T. McCaul (Chair- man of the committee) presiding. Present: Representatives McCaul, King, Rogers, Barletta, Perry, Katko, Hurd, McSally, Fitzpatrick, Estes, Bacon, Lesko, Thompson, Jackson Lee, Langevin, Keating, Payne, Vela, Watson Coleman, Rice, Correa, Demings, and Barraga´n. Chairman MCCAUL. The Committee on Homeland Security will come to order. The committee is meeting today to examine the work that the Department of Homeland Security is doing to assist State and local officials to secure election infrastructure, including voting ma- chines, vote tallying systems, and voter databases. In addition to election security, we will also examine DHS’s role working across all 16 critical infrastructures, because a cyber threat to elections may pose a similar threat to other critical infra- structure sectors. I now recognize myself for an opening statement. Our democratic system and critical infrastructures are under at- tack. In 2016, Russia meddled in our Presidential election through a series of cyber attacks and information warfare. Their goals were to undermine the credibility of the outcome and sow discord and chaos among the American people. This was a provocative attack against our country; we must not allow it to happen again. I have stated repeatedly and long before the last election that foreign interference in our democracy cannot be tolerated. I strongly believe we will be targeted again this No- vember in the midterm elections, and we need to be prepared. That is why we included $380 million in grants to the Election Assistance Commission and $26 million to the Department of Homeland Security for election infrastructure in fiscal year 2018. These funds will enhance election technology and bolster cyber readiness. However, malicious use of the internet and the exploitation of so- cial media are not just aimed at our election systems. In March, the FBI and DHS reported that Russian hackers attacked Amer- (1) VerDate Mar 15 2010 15:40 Jan 03, 2019 Jkt 000000 PO 00000 Frm 00005 Fmt 6633 Sfmt 6633 H:\115TH CONGRESS\18FL0711\18FL0711 HEATH 2 ican nuclear power plants. Crippling or shutting down major parts of our energy sector would be catastrophic. Russia has already done this to our allies. In 2015, a cyber at- tack turned off electricity for hundreds of thousands of Ukrainians. Last year, I stood on the front lines of Russia’s cyber war in Ukraine and saw the effects first-hand. Nation-state hacking is real and it is dangerous. Unfortunately, Russia is not the only villain. Between 2011 and 2013, Iranian hackers attacked dozens of U.S. banks and tried to shut down a dam in New York. In 2014, Chinese hackers stole 22 million secu- rity clearances from OPM, including my own. These attacks and others are part of a greater onslaught being waged against the United States. As a result, I have made strengthening our cybersecurity a top priority of this committee. In the past year we have passed legisla- tion to create the Cyber Security and Infrastructure Security Agen- cy to elevate and operationalize the cybersecurity mission at DHS; authorize cyber incident response teams to assist local and State officials in identifying cyber risks and restoring essential services; and reauthorize DHS to ensure it offers services to local and State election officials upon request. We are proud of these accomplishments, but we can always do more. So today’s hearing gives us a chance to offer new ideas and promote new solutions to help protect our elections and other crit- ical infrastructures. I would like to thank the witnesses for being here today. We are grateful for your service to the country and expertise and look for- ward to working with each of you. [The statement of Chairman McCaul follows:] STATEMENT OF CHAIRMAN MICHAEL T. MCCAUL JULY 11, 2018 Our democratic system and critical infrastructure are under attack. In 2016, Russia meddled in our Presidential election through a series of cyber at- tacks and information warfare. Their goals were to undermine the credibility of the outcome and sow discord among the American people. This was a provocative attack against our country and we must not allow it to happen again. I have stated repeatedly, and long before the last election, that foreign inter- ference in our democracy cannot be tolerated. I strongly believe we’ll be targeted again this November. We need to be prepared. That is why we included $380 million in grants to the Election Assistance Com- mission and $26 million to DHS for election infrastructure in the fiscal year 2018 omnibus. These funds will enhance election technology and bolster cyber readiness. However, malicious use of the internet and the exploitation of social media are not just aimed at our election systems. In March, the FBI and DHS reported that Russian hackers attacked American nuclear power plants. Crippling or shutting down major parts of our energy sector would