Who's in charge: Secretary of State Paul Pate, Director of Elections Dawn Williams

Iowa uses nothing but paper ballots for all forms of voting, and then tabulates the votes with ballot marking technology or optical scanners.

The auditing process has come under some criticism for a variety of perceived flaws, including its scope, which is limited to a fixed number of counties and precincts, and a lack of binding results. Further complicating matters is Iowa’s policy allowing voters stationed or living overseas to return voted ballots electronically, a practice that some regard as insecure.

In 2018 Iowa was granted about $4.6 million in federal funds, to be applied toward various new and ongoing election security initiatives. This includes replacing the old version of I-VOTERS, the Hawkeye State’s voter registration system, and bolstering its cyber protections with the addition of firewall upgrades, two-factor authentication and user training. The RFP process for I-VOTERS is expected to begin in 2019, according to documentation recently provided to the U.S. Election Assistance Commission.

Additionally, Secretary of State Paul Pate said that nearly 60 percent of funds acquired under the Help Americans Vote Act (HAVA) would go directly to supporting Iowa’s 99 local counties. However, Pate said, they would not use the funds toward the purchase of new equipment because most of these counties already renewed their technology over the last three years.

And back in August, Pate’s office also said they would be adding an information security officer and cyber navigator position to the staff.

Iowa was one of the 21 states known to be targeted by Russian hackers in the run-up to the 2016 elections. In the course of its own research, the Center for American Progress attempted to assess what protections would be in place for 2018, but the organization reported that state officials would not provide it with the information it was seeking. However the group said the state’s voter registration system does benefit from intrusion detection technology and vulnerability testing, and that all voting machines must be tested to EAC Voluntary Voting System Guidelines.