PAUL D FATE SECRETARY OF STATE LUCAS BUILDING DES MOINES IOWA 50319 OFFICE OF THE IOWA SECRETARY OF STATE Mark Abbott Grants Of cer US Election Assistance Commission Dear Mr Abbott The integrity of Iowa's elections is the top priority for Secretary of State Paul D Pate and his staff These HAVA funds will be used for that purpose Secretary Pate has taken numerous steps to bolster election security in Iowa That includes unprecedented partnerships with county state and federal entities The Iowa Election Cybersecurity Working Group created by Secretary Pate is comprised of a variety of experts and stakeholders who are committed to protecting the integrity of the vote Working with the Iowa Legislature and Governor Reynolds Secretary Pate has begun the process of replacing the state's voter registration database I-VOTERS Iowa s HAVA match funds will be used for cybersecurity protections related to this project It is vital to build a human firewall that is just as robust as a technological one Secretary Pate is partnering with all 99 county auditors to ensure the protection of our elections on every level Almost 60 percent of Iowa's HAVA funds will be committed to bene ting Iowa counties That equates to nearly $3 million Secretary Pate is working to implement a two factor authentication requirement for access to I-VOTERS The database is utilized by all 99 counties Additionally cybersecurity training will become mandatory for all users Secretary Pate is partnering with the US Department of Homeland Security and the Of ce of the Chief Information Of cer to provide robust cybersecurity protection and resources for all 99 counties Highly attended workshops have been conducted to inform counties about these resources The goal is to have every county implement these protections in addition to the ones they already utilize in advance of the November elections These plans for the HAVA funds remain uid and will be based on immediate and long-term needs Cybersecurity is a race without a finish line and Iowa intends to lead this race First in the nation in voting demands rst in the nation security Secretary Pate and his staff are fully committed to protecting the integrity of Iowa's elections Sincerely Molly M Hammer Legal Counsel Phone 515 281-5204 Fax 515-242-5953 sos iowa gov sos@sos iowa gov Introduction The overarching mission of the Iowa Secretary of State is to administer lawful fair impartial and secure elections Secretary Pate wants every eligible Iowan to register to vote and participate in our elections The greatest challenge over the past two years has been to ensure that every possible measure has been taken to protect Iowa s election infrastructure including the state voter registration system election night reporting system and public-facing website as well as the election infrastructure of all 99 Iowa counties The Iowa Secretary of State has been working closely with federal state and local partners to harden the cybersecurity and human security of Iowa s election infrastructure Active partners include the US and Iowa Departments of Homeland Security Federal Bureau of Investigation Election Infrastructure Information Sharing and Analysis Center Center for Internet Security US Election Assistance Commission Iowa National Guard Iowa Intelligence Fusion Center Iowa Of ce of the Chief Information Of cer Iowa State University Information Assurance Center Iowa Cyber Alliance private vendors and county auditors and IT of cials The Secretary has appointed several of these partners to the Iowa Election Cybersecurity Working Group whose purpose is to advise the Secretary on election cybersecurity Through these partnerships the Iowa Secretary of State is working to build robust technological and human rewalls both at the state level and in all 99 Iowa counties The Secretary will use the $4 8 million in federal and state HAVA funds to improve election administration harden election security and increase accessibility An emphasis will be placed on providing resources and support to Iowa s 99 counties with an effort to identify and encourage the use of best practices The HAVA funds provide a unique challenge and opportunity to ensure the integrity of Iowa s elections for years to come The State of Iowa s matching funds were appropriated through the Rebuild Iowa Infrastructure Fund RIIF The money will be used to replace I-VOTERS Iowa s statewide voter registration system The project is currently in the research phase but the RFP process is expected to begin in 2019 The matched funds will be expended on cybersecurity protections for the statewide voter registration system HAVA Program Initiatives A Voting Equipment Voters in Iowa cast paper ballots that are counted with the use of ballot scanners at each precinct The same process is utilized at county election of ces for absentee ballots In addition each precinct is required to have a ballot-marking device that meets federal accessibility standards Decisions on type of election equipment are made by each county from a list of approved and tested equipment managed by the Iowa Secretary of State Over the past three years the large majority of Iowa s 99 counties have taken the initiative to update their election equipment For this reason and because counties have statutory responsibility and authority over the purchase and management of Phone 515-281-5204 Fax 515-242-5953 sos iowa gov sos@sos iowa gov election equipment these funds will not be focused on the purchase and replacement of election equipment B Election Auditing Iowa will be conducting post-election audits beginning with 2018 General Election These funds will be utilized to educate carry out and improve the audit process They will also be utilized to investigate the bene ts and costs of risk limiting election audits in the State of Iowa C Voter Registration Iowa has begun the process of joining the Electronic Registration Information Center Inc ERIC The bene ts of participation in ERIC include more accurate and up-to-date voter lists and a regular process to identify and encourage eligible but unregistered citizens to register to vote These funds will be utilized for membership dues programming costs related to ERIC and required mailings associated with membership in the ERIC program D Cybersecurity HAVA funds will be used for a combination of statewide and county level measures On a statewide level the funds will be utilized for rewall upgrades increased security for I-VOTERS the statewide registration database and to add additional staff members to better serve and assist counties as they seek to enhance their security measures On a county level the funds will be used to provide more secure access to I-VOTERS through implementation and utilization of two-factor authentication The funds will also be used to explore improvements to technology and security equipment available to Iowa s counties The HAVA funds will allow the Iowa Secretary of State s Of ce to continue and expand upon educational and training opportunities available to County Auditors their staff and County IT professionals Educational programming will include The National Election Security Summit in St Louis yearly Cybersecurity summits with County Auditors and IT staff Cyber Incident Tabletop Exercises and County Incident Planning E Communication Communication efforts include improvements to the Elections portion of the Iowa Secretary of State s website to provide for added security functionality and accessibility Additional funds will be used to encourage voter participation through voter education and to build the public s con dence in the integrity of Iowa s elections F Accessibility HAVA funds Will be used along with funds provided by Disability Rights Iowa to provide Curbside Voting Signs to counties for use in front of precincts Counties will also have the opportunity to apply for ADA compliance grants for use at polling sites Additional funds will be used for outreach to the disability community including organizations Phone 5 1 5-28 1-5204 Fax 5 1 5-242-5953 sos iowa gov sos@sos iowa gov that provide services to injured or disabled veterans to help encourage registration and participation G Election Administration Funds will be used to continue and enhance training for County Auditors and their staff Precinct Election Of cials and the Secretary of State s staff Funds going towards election administration will also be used to increase the ef ciency functionality and security of our Election Night Reporting Service Activities to Occur Before or During the 2018 General Election Cycle Partnership with DHS on the Last Mile Project to provide security posters for each of Iowa s 99 counties DHS assessments including Risk and Vulnerability Cyber Resilience Review External Dependency Management Infrastructure Survey and Phishing Campaign 0 Joined DHS Information Network 0 Preform weekly vulnerability scan 0 Upgrades to rewalls protecting internal network Joined the Electronic Registration Information Center Inc ERIC and will be sending out an Unregistered But Eligible UBE mailing by October 1 2018 Two-factor authentication for I-VOTERS users Develop and implement county level incident response plans 0 2 table tops session were held in partnership with DHS for County Auditors elections staff and county IT professionals Create and distribute Curbside Voting Signs to counties for use at polling locations - Requiring Securing the Human an online cybersecurity training program to county level staff in partnership with the Iowa Of ce of the Chief Information Of cer OCIO Cybersecurity training opportunities for Secretary of State staff County Auditors elections staff and county IT professionals through conferences at NASED The Election Center and The National Election Security Summit The Iowa Secretary of State s Of ce hosted two Cybersecurity Workshops for County Auditors elections staff and county IT professionals to promote free services offered by the OCIO DHS and other state and federal partners 0 Post election audits will be conducted following the General Election Upgrades to Election Night Reporting system including increased cybersecurity protections such as two-factor authentication 0 Hiring an Information Security Of cer and Cyber Navigator Partnering with OCIO to offer all interested counties malware protection and an intrusion detection system Development of training tools for County Auditors elections staff and precinct election of cials 0 Development of communications aimed at reassuring the public con dence in the integrity and security of Iowa s elections 0 Development of communications aimed at educating and encouraging voters with disabilities to vote including veterans with disabilities 0 Creation of a Cyber Working Group with local state and federal partners Phone 515-281-5204 Fax 515-242-5953 sos iowa gov sos@sos iowa gov 2018 HAVA ELECTION SECURITY GRANT Budget Information CFDA 0 90 404 Non-Construction Program Name of Organization Budget Period Start Budget Period End Ilowa Secretary of State I 30308 SECTION A - BUDGET SUMMARY FEDERAL 8 NON-FEDERAL FUNDS Matchl FY 2023 Consolidated Budget for total project term- up to 5 years as defined by gran tee PROGRAM CATEGORIES Voter 23322 15 30 Cyber Security Communications Acessability TOTALS Fed Total BUDGET CATEGORIES Systems 1 PERSONNEL including fringe 300 000 00 5 375 000 00 1 175 000 00 25% 2 EQUIPMENT 5 525 000 00 75 000 00 600 000 00 13% 3 SUBGRANTS- to local votingjurisdictions 200 000 00 5 200 000 00 4% 4 TRAINING 50 000 00 5 384 000 00 149 084 00 5 $83 084 00 13% 5 All OTHER COSTS 150 000 00 250 000 00 600 000 00 5 675 000 00 5 125 000 00 5 250 000 00 2 050 000 00 44% 6 TOTAL DIRECT 5 200 000 00 5 250 000 00 5 2 309 000 00 1 050 000 00 400 000 00 5 399 084 00 4 603 084 00 7 INDIRECT COSTS if appliedl 0% 8 Total Federal Budget 5 200 000 00 5 250 000 00 2 309 000 00 1 050 000 00 400 000 00 5 399 034 00 5 4 608 084 00 11 Non-Federal Match 5 230 404 00 230 404 00 12 Total Program Budget 5 200 000 00 5 480 404 00 5 2 309 000 00 1 050 000 00 400 000 00 399 084 00 4 838 488 00 13 Percentage By Category Proposed State Match 5 0% A Do you have an Indirect Cost Rate Agreement approved by the Federal government or some other non-federal entity If yes please provide the following information B Period Covered by the Indirect Cost Rate Agreement C Approving Federal agency 0 If other than Federal agency please specify E The Indirect Cost Rate is l