Utah Audit Reveals Cybersecurity Risks in Election Processes and Calls for Legislative Action

Utah's election security received a significant boost following a recent legislative audit that highlighted both strengths and areas for improvement in the state's cybersecurity measures. During the Government Operations Interim Committee meeting on May 21, 2025, audit managers presented findings from a comprehensive review of election processes, emphasizing the importance of safeguarding against cyber threats.

The audit, mandated every two years, revealed that while Utah's election systems are generally secure, there are recommendations for enhancing protections against potential vulnerabilities. Jesse Martinson, the Audit Manager, and Jake Dinsdale, Senior Supervisor, led the presentation, underscoring the rigorous testing and validation processes that ensure election equipment is not connected to the Internet—a critical safeguard against cyberattacks.

The audit team conducted extensive testing, including network scans and physical inspections of election equipment, confirming that no machines were connected to the Internet. However, they identified concerns regarding certain hardware that could potentially allow for wireless connections. As a proactive measure, the auditors recommended that state legislation be updated to prohibit the capability for such connections entirely, following the lead of states like Texas and Ohio.

In addition to hardware security, the audit also assessed the software used in elections. The findings indicated that the software is properly vetted and certified, with multiple layers of validation in place to ensure its integrity. The audit team participated in hash validation processes to confirm that the software running on county machines matched approved versions, further reinforcing the reliability of Utah's election systems.

The committee's discussions highlighted the importance of these findings, as they not only reflect the current state of election security but also pave the way for legislative action aimed at strengthening protections. As Utah prepares for future elections, the recommendations from this audit will be crucial in maintaining public confidence in the electoral process and ensuring that the state's systems remain resilient against emerging cyber threats.