Designation of election infrastructure as part of the NIPP has been a matter of discussion since 2002. It took longer to implement than the first and second waves of NIPP domains because of the lack of a single federal agency or formalized policies that defined and oversaw EI.
It wasn't until 2016 that enough was formalized to define EI separately, before that it was under the purview of each state (technically SLTT- State, Local Government, Tribal Land and Territory). Cyber guidance came from the MS-ISAC, but Johnson's order funded the EI-ISAC (which is also the same SOC as the MS-ISAC).
Not whitehat. But not blackhat, either.
Designation of election infrastructure as part of the NIPP has been a matter of discussion since 2002. It took longer to implement than the first and second waves of NIPP domains because of the lack of a single federal agency or formalized policies that defined and oversaw EI.
It wasn't until 2016 that enough was formalized to define EI separately, before that it was under the purview of each state (technically SLTT- State, Local Government, Tribal Land and Territory). Cyber guidance came from the MS-ISAC, but Johnson's order funded the EI-ISAC (which is also the same SOC as the MS-ISAC).