Security Operations Center Achievements for 2022 Election Cycle

About the Program

Category: Information Technology (Best in Category)

Year: 2023

The Elections Cybersecurity Operations Center (E-CSOC) monitors the elections infrastructure and business networks within the Los Angeles County Registrar-Recorder/County Clerk (RR/CC). The E-CSOC was built to address the unique challenges of running a security program that oversees election infrastructure, including the monitoring of hundreds of temporary vote center locations during elections. During major elections, the E-CSOC operates 24/7 for the duration of the 11-day voting cycle with onsite and remote support to monitor for any potential security threats or indicators of compromise. The E-CSOC collects security data from multiple on-premises and cloud environments and correlates events across all environments, presenting correlated alarms in a single pane of glass. The E-CSOC leverages information from agencies including the EI-ISAC, FBI, and CISA, along with the Open Threat Exchange (OTX), which is the world's largest open threat intelligence community. The E-CSOC is architected and supported by the AT&T Cybersecurity team and the RR/CC security team. As a key part of RR/CC’s cybersecurity plan, the E-CSOC provides early detection of threats that may jeopardize elections and enables the RR/CC security team to monitor the efficacy of its security controls.