State of Maryland Maryland’s Voter Registration Systems – Security Features and Practices Statewide Voter Registration Database General Information  Maryland’s voter registration database is centralized, statewide, and owned by the State Board of Elections (SBE). The local boards of elections access and enter data.  A professional web hosting company hosts the database in two separate secure locations.  Access is limited to specific IP addresses. Only IP addresses associated with SBE and the local boards of elections can access the database through a secure network.  There are two levels of user authentication. The first level grants access to the platform, and the second level grants access to the database. All users have unique usernames and passwords for both levels.  Data are replicated in real time between the two locations. This means both locations have the same data at all times.  The database is backed up nightly. Security Best Practices  All State and local election officials receive regular security training.  Only those election officials that need access have access.  Only those election officials that need administrative access have this access.  All employees with access to the voter registration database have had background checks.  User authentication policies comply with the State of Maryland’s Information Security Policy.  All transactions – including system configuration and voter data transactions – are logged.  Voter registration data are encrypted, and the network uses secure protocols.  Regular audits are performed on logs, transactions, and data entry. Online Voter Registration System General Information  This is a web-based system that allows a user to register to vote, update voter information, and request an absentee ballot. It is an alternate to the paperbased process.  To use this system, the user must enter: (1) first and last name; (2) date of birth; (3) zip code of his or her residential address; (4) Maryland driver’s license number or an ID card number issued by Maryland’s Motor Vehicle Administration; (5) the date MVA issued the license or ID card; and (6) the last four digits of the user’s Social Security number. MVA must verify this information before the user can enter more information.  A professional web hosting company hosts this system in a secure location.  Data entered into the online voter registration system are stored in an encrypted database.  Each night, SBE transfers the data into the statewide voter registration database for processing. A local election official reviews and processes the data in the statewide voter registration database. 151 West Street, Suite 200  PO Box 6486  Annapolis, MD 21401 Local - 410.269.2840  Toll Free - 800.222.8683  MD Relay - 800.735.2258 www.elections.maryland.gov State Board of Elections – September 14, 2016 meeting Page 2 of 2 o A user does not create a new voter registration record or update his or her official voter registration record when he or she uses the online voter registration system. Security Best Practices  All State and local election officials receive regular security training.  All transactions are logged.  Automated reports are generated when unexpected events or data patterns appear, and SBE staff members review these reports.  Data entered into system are encrypted and stored in an encrypted database.  SBE regularly runs security scanning software on the system.  Data submitted via this system are backed up frequently.