网络安全局发布2026年选举基础设施安全计划：为11月3日中期选举提供免费防护服务
网络安全与基础设施安全局（CISA）9月24日发布《2026年选举基础设施安全计划》，为11月3日举行的2026年中期选举做准备。这份13页的计划副题为「守护下一个250年」，系统梳理选举基础设施面临的威胁，并列明该局可向州、县、市各级选举官员提供的免费防护服务。
CISA在计划中表示，选举基础设施的安全与韧性是至关重要的国家利益，也是国土安全部的最高优先事项之一；美国民众对「自己的选票会按所投内容被计入」的信心至关重要，保障选举基础设施需要州、地方与联邦伙伴全年无休的协作。美国国土安全部已于2017年1月将选举基础设施列为关键基础设施的一部分。
计划列出的主要威胁包括：选举办公室系统常与普通办公网络相连，攻击者可利用已知软件漏洞侵入选民登记数据库并横向移动；内部人员风险；以及投票场所面临的炸弹威胁等物理风险，2024年选举期间部分投票站曾遭遇此类威胁。
针对这些威胁，计划重申多项行之有效的选举实务：处理选票时由两党人员两人一组、全程保持选票保管链记录、允许观察员在场监督计票，并建议使用可人工复核的纸质选票、选后进行人工审计，以保证透明度与可核查性。
CISA表示，该局向选举官员提供一系列不收费的网络与物理安全服务，包括风险与漏洞评估、持续漏洞扫描、现场渗透测试、安全评估、培训与桌面推演，并通过区域选举安全顾问与各州情报融合中心共享威胁情报。
国土安全部长 Markwayne Mullin 表示，该计划「将全面实施」，对保障美国人选举国家领导人的安全、自由与公正至关重要；国土安全部也一贯支持 CISA 向选举官员提供网络与物理安全服务。该计划系 Mullin 今年7月下令制定。
选举基础设施涵盖选民登记数据库、选举管理与计票系统、投票设备存放场所及投票站等。CISA是国土安全部下属的联邦网络防御机构，负责协调全国关键基础设施的安全与风险管理工作。
（来源：网络安全与基础设施安全局）
CISA Releases 2026 Election Infrastructure Security Plan Ahead of Nov. 3 Midterms
The Cybersecurity and Infrastructure Security Agency (CISA) on September 24 released its 2026 Election Infrastructure Security Plan ahead of the November 3 midterm elections. The 13-page plan, titled "Securing the Next 250," catalogs the threats facing election infrastructure and lists the no-cost protective services the agency offers to state, county and local election officials.
According to CISA, election infrastructure requires steadfast security and resilience; it is a vital national interest and one of the Department of Homeland Security's highest priorities. The American people's confidence that their vote will be counted as cast is essential, CISA said, and securing election infrastructure requires year-round diligence and close coordination between state, local and federal partners. The Department of Homeland Security designated election infrastructure as critical infrastructure in January 2017.
The threats identified in the plan include election offices whose systems are often accessible from general enterprise networks, allowing attackers to exploit known software vulnerabilities, reach voter registration databases and move laterally; insider risks; and physical risks such as the bomb threats that hit some polling places in 2024.
To counter those threats, the plan restates longstanding election practices: handling ballots in bipartisan teams of two, maintaining chain-of-custody procedures, allowing observers to be present during counting, using paper ballots that can be reviewed to ensure transparency and auditability, and conducting post-election manual audits.
CISA said it offers election officials a range of no-cost cybersecurity and physical security services, including risk and vulnerability assessments, continuous vulnerability scanning, on-site penetration testing, security assessments, training and tabletop exercises, alongside threat-intelligence sharing through regional election security advisors and state fusion centers.
Homeland Security Secretary Markwayne Mullin said the plan "will be implemented in full" and is crucial to the security, freeness and fairness of choosing the nation's leaders, adding that the department has consistently supported CISA's delivery of cybersecurity and physical security services to election officials. The plan was ordered by Mullin in July.
Election infrastructure includes voter registration databases, systems used to manage elections and count and report results, storage facilities and polling places. CISA, part of the Department of Homeland Security, is the federal agency that leads the national effort to understand, manage and reduce risk to the nation's digital and physical infrastructure.
(Source: Cybersecurity and Infrastructure Security Agency)
来源：网络安全与基础设施安全局
发布：GSM·美国（发布链接）
图片来源：图：美国国土安全部总部（固定图库）。公共领域。 / Photo: U.S. Department of Homeland Security headquarters (file photo). Public domain.
GSM Global · 本篇英文版 English edition of this story
