STATE OF MICHIGAN RUTH JOHNSON SECRETARY OF STATE DEPARTMENT OF STATE LANSING MICHIGAN PLAN AND NARRATIVE 2018 HAVA ELECTION SECURITY GRANT Introduction General Summary The State of Michigan was awarded a total of $10 706 992 in recently-released Federal Help America Vote Act HAVA election security grant funds The required 5% match $535 350 has been appropriated into the Department of State s budget by the Michigan legislature for a total of $11 242 342 available for use to implement improvements to further enhance Michigan s election security Michigan takes pride in the robust security processes which are built into its elections administration Michigan has checks and balances throughout the election lifecycle and continues to build strong partnerships with law enforcement and security agencies while working closely with state and federal partners to continue to build and enhance our reputation for secure voting Michigan is pleased to receive additional funding to further enhance our election system s security end to end In 2017 Michigan began the process of replacing its aging paper-based optical scan voting systems with upgraded digital optical scan systems in doing so the continued use of a paper ballot statewide was a major priority Gradual rollout of the new systems began in August of 2017 and all jurisdictions statewide will use the new systems in Michigan s upcoming August 7 2018 primary Michigan was able to fund the purchase of this new generation of more secure voting systems by utilizing remaining funding from the original HAVA grant $30 million along with an additional $10 million appropriated by the Michigan legislature Therefore the recently-released additional HAVA funding will not be used to replace voting systems but instead will be focused on assessing and enhancing election security at all levels state county local as well as continued enhancements to a major upgrade already underway for the statewide Qualified Voter File QVF with an overall emphasis on security Additionally Michigan will pursue several targeted efforts that involve data validation and integrity projects as well as comprehensive training auditing and communication efforts specifically focused on election security at all levels State-Level Security Assessments Michigan s 2018 HAVA grant spend plan focuses on cyber information and physical security specifically our largest area of emphasis will involve providing funding and resources statewide to allow for the completion of detailed election system security assessments at the state county and local city- township level With Michigan being one of only eight states in the nation to administer elections at the local level with over 1 600 different county city and township officials each independently administering elections locally a substantial portion of the security grant will be used to assist counties cities and townships with assessing their end-to-end election systems identifying possible issues and making the necessary changes and improvements to ensure the highest possible level of security is present in all major systems involved in administering elections RICHARD H AUSTIN BUILDING 4TH FLOOR 430 W ALLEGAN LANSING MICHIGAN 48918 517 373-2510 At the state level the QVF is already secured and protected by Michigan s Department of Technology Management and Budget DTMB via a robust network and multiple layers of monitoring including intrusion detection systems All of these systems and tools are housed in the state s centralized Data Center managed by DTM B All counties cities and townships access the QVF through this network Advanced security testing has already been completed on the statewide QVF and is also occurring on the statewide Election Night Reporting ENR system A portion of the funding will be used to ensure regular testing of this type continues to occur with key election system components at the state level In addition to major election lT-related systems Michigan s statewide assessment of end-to end election systems and processes will include a review of state-local procedures responsibilities and communications Currently in the Request for Proposal RFP stage the state plans to award a contract to a qualified consultant group with specialized multi-faceted expertise in election administration cyber information and physical security and communications The results of this assessment will also help to set further detailed plans into motion for continued use of the grant funds to assist county and local election officials with similar detailed assessments and completion of necessary improvements at the county and local level County-Local Security Assessments Michigan expects to follow a model similar to the statewide election assessment currently underway to work with counties and local jurisdictions to conduct similar evaluations and implement improvements throughout their individual system configurations Michigan plans to evaluate and qualify multiple service providers who may assist counties cities and townships with local assessments as well as provide multiple security-related product options such as sensors software and intrusion detection systems which may be purchased with HAVA security grant funds as needs are identified Multiple qualified service providers will be available statewide to provide individualized assessments for county and local election officials to thoroughly review and evaluate election systems and develop plans for necessary changes to improve and enhance security These assessments are expected to include a review of connectivity to the state voting system election management system software configurations and networks county and local election night reporting systems and other key election- related systems configurations and procedures in place at the county and local level Grant funding may also be allocated to implement needed and approved changes at the county and local level State Quali ed Voter File - Continued Advancement and Focus on Security A major upgrade to Michigan s QVF system is underway Michigan s statewide QVF system has been an internally-developed product and a national leader since its inception in the mid-19905 The upgrade continues with an internally-developed system and involves a migration to a secure modern platform and programming language along with numerous system enhancements to increase security and provide added features that have been requested by users at the county and local level HAVA security grant funding will be utilized to ensure a dedicated focus on security and an overall structure to provide ongoing assistance and response to the needs of our over 3 000 users Additionally further security enhancements will be added to fully implement a security protocol that includes multi-factor authentication Other Data and Security-Related Projects Additional projects are planned that will involve a varied and wide-ranging approach to measuring and enhancing election-related data including election audits data validation and integrity projects a statewide infrastructure change to a proven cutting edge geo-spatial addressing system in the and an upgraded improved interactive and secure statewide Election Night Reporting system Plan Implementation Dedicated Election Security-Related Resources To ensure a full focus on election security and to assist with the timely completion of all planned activities related to the HAVA election security grant Michigan plans to employ dedicated resources who are focused on election security These resources will include at least two limited term 5-year employees one working directly in Michigan s Bureau of Elections Election Security Specialist and a 2 d under the direction of the State s DTMB Cyber Election Security Specialist These resources will work closely together and with the Bureau of Elections and State DTMB to ensure completion of all facets of our HAVA security grant plan and will be heavily involved in the various efforts and projects mentioned here Additionally the Election Security Specialist will also work with other Bureau of Elections staff to fully develop and implement a comprehensive training plan with a specific focus on security cyber security as it relates to elections as well as physical and information security and additional thorough training on other key county and local procedural requirements that affect the overall security of the elections process HAVA Election Security Grant Spend Plan - Summary by Category Michigan s HAVA Security Grant Budget Detail is attached A summary of the total estimated costs by major program category including specific components under each are listed below Program Total Major Plan Components Category Estimated Spend Plan Cyber Security $5 5 million 0 Statewide election security assessment 0 State county and local security assessments and improvements 0 Dedicated resources Voter $3 1 million 0 State county and local security assessments and Registration improvements System 0 Dedicated resources 0 Multi-factor authentication 0 Geo-Spatial addressing structure 0 Data validation and integrity initiatives Communications $1 6 million 0 Dedicated resources Training 0 Comprehensive election security training Auditing 0 Election security procedural reviews 0 Enhanced expanded post election audits 0 Enhanced expanded state-local election security disaster recovery and overall communication plans Election Night $1 million 0 State county and local security assessments and Reporting ENR improvements 0 Enhanced interactive and secure statewide ENR 2018 HAVA ELECTION SECURITY GRANT Budget Information CFDA ti 90 404 Non-Construction Program Name of Organization Michigan Department of State Bureau of Elections I Budget Period Start SECTION A BUDGET SUMMARY Consolidated Budget for total project term- Budget Period End 3f23f2023 FEDERAL 8 NON-FEDERAL FUNDS Match up to 5 years as de ned by grantee PROGRAM CATEGORIES If yes please provide the following information B Period Covered by the Indirect Cost Rate Agreement C Approving Federal agency D If other than Federal agency please specify E The indirect Cost Rate is 10 1 2017 - 9730 2023 Health and Human Services 15 6096' 5 21 2 bif ggn c Id Cyber Security Communications Elegl hifi ht 8 Other TOTALS Fed TOIZEII BUDGET CATEGORIES Reporting System 1 PERSONNEL including fringe 5 66 600 5 200 000 5 400 000 666 600 7% 2 EQUIPMENT 5 119 100 5 119 100 5 238 200 3% 3 SUBGRANTS- to local voting jurisdictions 5 - 0% 4 TRAINING 175 900 5 590 500 93 400 3 193 800 1 053 600 11% 5 All OTHER COSTS 5 2 301 500 5 3 654 904 742 300 5 605 000 7 303 704 79% 6 TOTAL DIRECT COSTS 1-6 5 5 66 600 2 596 500 5 4 564 504 5 1 235 700 798 800 5 9 262 104 7 INDIRECT COSTS ifappliedl 5 10 390 5 405 054 712 063 5 192 769 5 124 613 5 5 1 444 888 16% 8 Total Federal Budget 5 5 76 990 5 3 001 554 5 5 276 567 5 1 428 469 5 923 413 5 10 706 992 11 Non-Federal Match 3 3 849 150 078 5 263 828 5 71 423 5 46 171 5 535 350 12 Total Program Budget 5 5 80 839 5 3 151 632 5 5 540 395 5 1 499 393 969 583 5 11 242 342 13 Percentage By Category 0% 1% 28% 4996 13% 9% Proposed State Match 5% A Do you have an Indirect Cost Rate Agreement approved by the Federal government or some other non-federal entity Yes