Election security is the collection of legal, administrative, physical, procedural, technological and organisational measures used to protect an election from interference, disruption, manipulation, coercion, fraud, unauthorised access and other threats that could undermine the ability of voters to participate freely and the ability of election officials to administer and report the election accurately. It covers the entire electoral process rather than merely the security of voting machines.
Relevant stages can include voter registration, candidate nomination, campaigning, production and distribution of ballot papers, postal voting, polling, ballot transport, counting, tabulation, result transmission, publication of results, storage of election materials and post election review. Security therefore concerns both the protection of election infrastructure and the protection of the processes and people operating it. A secure election should preserve the confidentiality of secret ballots, the integrity and availability of electoral information, the physical safety of participants, the continuity of electoral operations and the reliability of the final count.
A major component of election security is physical security. Polling stations, counting centres, ballot storage locations, electoral offices and transportation routes can require controlled access, secure storage, documented custody procedures and contingency arrangements. Ballot papers and other election materials may need to be protected against theft, alteration, destruction or unauthorised handling. Physical security also encompasses the safety of voters, election workers, observers, candidates and agents.
Security arrangements must nevertheless be compatible with transparency because excessive secrecy around ordinary electoral procedures can undermine confidence just as inadequate protection can create vulnerabilities. The objective is therefore not simply to restrict access but to establish controlled, lawful and observable access. In many systems, multiple people are involved in handling election materials, records are documented, seals or equivalent controls are used, and representatives of candidates or accredited observers can watch relevant procedures. These arrangements create opportunities for irregularities to be detected rather than relying solely on trust in an individual official.
Cybersecurity has become an increasingly important part of election security because modern elections can depend on computers and networks for voter registration systems, election management databases, candidate information, electronic poll books, results transmission, communications, websites and public information systems. Cyber threats can include unauthorised access, malware, ransomware, denial of service attacks, credential theft, data manipulation and attempts to disrupt availability.
Election security does not mean that every election must be conducted electronically; paper based processes can also require cybersecurity because administrative records and communications may be digital. Strong cybersecurity generally involves access controls, authentication, system updates, network protection, backups, logging, incident response arrangements, staff training and testing. It also involves recognising that security failures can arise through ordinary human error, such as weak passwords, phishing or inappropriate access privileges, rather than only through sophisticated attacks.
Information security is distinct from cybersecurity but closely connected to it. Election authorities may hold sensitive personal information concerning voters, candidates, staff and postal voters, while also maintaining information whose accuracy is essential to the election. Security therefore has to protect confidentiality, integrity and availability according to the nature of the information. Confidentiality prevents unauthorised disclosure, integrity protects information against unauthorised alteration, and availability ensures that authorised users can access necessary systems when required.
Election authorities also need reliable procedures for correcting errors because an accidental data error can be electorally significant even when no malicious actor is involved. Public communications require particular care because false information can exploit uncertainty about registration, polling locations, deadlines, voting procedures or results. Election security consequently intersects with resilience, communications management and public information without being reducible to any single one of those fields.
Election security also protects the chain of custody surrounding ballots and election materials. A chain of custody is the documented sequence showing who had responsibility for particular materials, when they were transferred, where they were stored and what controls applied during each stage. Its importance is that confidence in a count depends not only on the arithmetic performed at the end but also on confidence that the material being counted was properly controlled beforehand.
In the United Kingdom, for example, verification involves comparing the number of ballot papers with ballot paper accounts, and discrepancies can lead to further checking and recounting before the count proceeds. Similar principles can be used in other electoral systems even though terminology and legal requirements differ. A well designed chain of custody provides documentary evidence and accountability rather than requiring officials or observers simply to assume that materials remained secure.
Security measures must also address threats to people and democratic participation. Intimidation, violence, coercion, threats against election workers, harassment of candidates, interference with observers and attempts to prevent particular voters from participating can damage the security of an election even when no ballot paper or computer system is directly attacked. Election security therefore overlaps with maintaining a safe environment in which electoral rights can be exercised.
Measures can include physical protection where necessary, secure workplaces, incident reporting, emergency procedures, staff support and arrangements for continuing essential electoral functions during disruptions. The principle is that security should protect the electoral process without being used as an unjustified reason to restrict lawful political participation. Election security must consequently be implemented within electoral law and other applicable legal safeguards rather than operating as an unrestricted power to control electoral activity.
Election security is closely related to, but not identical with, election integrity. Security is principally concerned with protecting the electoral process and its participants from threats and ensuring resilience against disruption or manipulation. Integrity is broader and concerns whether the electoral process complies with applicable rules and democratic principles and whether its outcomes accurately reflect the choices made through that process.
A system can have strong cybersecurity while still suffering an integrity problem caused by unfair administration or unlawful political interference. Conversely, an election can have sound administrative integrity while experiencing a cyber incident that is successfully contained without affecting the result. Security is therefore one important component of a broader integrity framework. Effective security arrangements should be proportionate, transparent where appropriate, independently reviewable and designed to support rather than replace ordinary electoral safeguards.
The practical significance of election security is that elections are systems rather than single events. Security must be designed around dependencies between registration, administration, voting, counting, tabulation, communications and results. Contingency planning is particularly important because a disruption does not necessarily have to change votes to create serious problems; an outage that prevents voters from accessing information or prevents officials from communicating accurately can affect confidence and continuity.
Resilient electoral systems therefore use layered protections, procedural safeguards, independent oversight, documentation, trained personnel, alternative processes and mechanisms for detecting and correcting problems. Election security cannot guarantee that no incident will ever occur. Its purpose is to reduce vulnerabilities, detect problems, contain incidents, preserve lawful electoral operations and provide evidence that the election was administered correctly despite challenges.
