ENISA sulla sicurezza dei sistemi ICT elettorali

"Fabio Pietrosanti (naif) - lists" <[email protected]> Sat, 2 Mar 2019 11:54:07 +0100
Newsgroups gmane.comp.security.italian
Message-ID <[email protected]>
In considerazione delle proposizioni governative in merito di voto 
online, è utile leggere quanto l'ENISA scrive come raccomandazioni sulla 
election security.
E' rilevante che tutto il comparto degli addetti al settore sicurezza 
ICT possa informare l'ambito istituzionale e politico, per quanto di 
loro competenza, sui rischi relativi per la sicurezza, e di conseguenza 
per la democrazia.
Election cybersecurity - Challenges and opportunities
https://www.enisa.europa.eu/publications/enisa-position-papers-and-opinions/election-cybersecurity-challenges-and-opportunities/view
Molto interessate da approfondire, nella sezione 5 entra nel merito del 
voto elettronico e voto online, chiaramente identificandoli come rischi 
abbandonati da tutti i paesi europei (tranne Belgio ed Estonia) e 
sottolineando come il voto online sia enormemente più rischioso del voto 
elettronico.
"Given that the majority of Member States have either postponed or 
discontinued the use of electronic voting, the risk associated with the 
voting process can be considered to be somewhat reduced. Examples
of countries that have postponed or discontinued electronic voting 
include Ireland,15 the Netherlands,16 France,17 Finland18 and Germany.19 
In the Netherlands in 2017, the government also decided to return to 
counting votes by hand instead of the electronic counting due to 
cybersecurity concerns.20 Examples of countries that make use of 
electronic voting technology include Estonia21 and Belgium22.
Taking into consideration that, as noted above, the roll- out of 
electronic voting has been either discontinued or postponed in a number 
of Member States, the cybersecurity risk level in relation to the voting 
process is considered medium. This cybersecurity risk level is likely to 
be higher in countries where e-voting systems are being implemented. A 
distinction should also be made between online and offline e-voting 
systems, where the former is likely to entail a higher cybersecurity 
risk level than the latter. "
Fabio