Electoral Commission
| Use attributes for filter ! | |
| Founded | 2001 |
|---|---|
| Headquarters location | London, United Kingdom |
| Number of employees | 156 (March 2009) |
| Jurisdiction | United Kingdom |
| Annual budget | 23. 5 million GBP (estimate 2009-10) |
| Date of Reg. | |
| Date of Upd. | |
| ID | 1197950 |
About Electoral Commission
The Electoral Commission is the election commission of the United Kingdom. It is an independent body, set up in 2001 by the British Parliament. It regulates party and election finance and sets standards for how elections should be run.
Poland election: Tusk's opposition eyes power after pivotal vote
... The National Electoral Commission will give the final result on Tuesday...
Hurt ripples in wake of Indigenous Voice vote
... National helplines were fielding a tsunami of calls from Indigenous people as Australia s usually quiet Electoral Commission repeatedly called for respectful and truthful debate...
Rutherglen and Hamilton West: Voters go to polls in by-election
... The Electoral Commission launched a campaign with South Lanarkshire Council to make people aware of the requirements amid concerns that voters could be turned away at polling stations...
Voter ID: General election could face serious disruption - survey
... Electoral Commission research found 90% of voters at May s election were " satisfied with the process of voting"...
Electoral Commission failed basic security test before hack
...By Joe TidyCyber correspondentThe Electoral Commission has confirmed it failed a basic cyber-security test around the same time hackers gained entry to the organisation...
Army officers say they are taking power in Gabon
... The Electoral Commission said Mr Bongo had won just under two-thirds of the votes in an election the opposition argued was fraudulent...
Emmerson Mnangagwa: 'The Crocodile' wins second term as Zimbabwe president
... 6% of the vote, the Electoral Commission says...
Labour Party spent more than Conservatives in 2022
...By Chas GeigerBBC NewsThe Labour Party significantly outspent the Conservatives last year, financial accounts released by the Electoral Commission show...
Electoral Commission failed basic security test before hack
By Joe TidyCyber correspondent
The Electoral Commission has confirmed it failed a basic cyber-security test around the same time hackers gained entry to the organisation.
A whistleblower told The Bbc that The Commission was given an automatic fail during a Cyber Essentials audit.
Last month that " hostile actors" accessed its emails and potentially the data of 40 million voters.
A spokeswoman said The Commission had still not passed the basic test.
In August the election watchdog announced hackers broke into their IT systems in August 2021 and had access to sensitive data until they were discovered and removed in October 2022.
The unnamed attackers accessed Electoral Commission email correspondence and could have viewed databases containing The Names and addresses of 40 million registered voters, including millions of those not on public registers.
It's Not Yet been revealed who carried out The Intrusion or how The Commission was breached.
But now a whistleblower has revealed that in the same month that hackers were breaking into the organisation, The Commission was told by cyber-security auditors that it was not compliant with the Cyber Essentials Scheme - a system backed by the government to help organisations achieve minimum best practice in cyber-security.
Cyber Essentials is voluntary but widely used by organisations as a way to show customers they are security-aware.
The government requires all suppliers bidding for contracts involving the handling of certain sensitive and personal information to hold an up-to-date Cyber Essentials certificate.
But The Commission failed in multiple areas when it tried to get certified in 2021.
A spokeswoman for The Commission admitted the failings but claims they weren't linked to the cyber-attack that impacted email servers.
One of the reasons it failed The Test was that about 200 staff laptops were running obsolete and potentially insecure software.
The Commission was urged to update the Windows 10 Enterprise Operating System , which had fallen out of date for security updates months earlier.
Auditors also issued the failure because staff were using old iPhones no longer supported by Apple to receive security updates.
The National Cyber Security Centre (NCSC), which backs the Cyber Essentials Scheme , advises all organisations to keep software up to date " to prevent known vulnerabilities from being exploited" by hackers.
Cyber-security consultant Daniel Card has helped many organisations become Cyber Essentials compliant and says it is too early to determine whether or not The Failures highlighted in the audit allowed hackers to Get In .
" Early indications are that the hackers managed to get into the email servers a different way, but there's a chance that The Chain of attack may have included one or more of these poorly-secured devices, " He Said .
Regardless of whether or not the hackers did " it builds a picture of a weak posture and a probable failure to govern and manage" he added.
The NCSC promotes Cyber Essentials certification, saying that " vulnerability to basic attacks can mark you out as a target for more in-depth unwanted attention from cyber-criminals and others".
The UK's Information Commissioner's Office, which has passed Cyber Essentials and Cyber Essentials Plus, said it was investigating the cyber-attack as a matter of urgency.
When the hack was announced, the Electoral Commission said that the data hacked from the full electoral register was " largely in The Public domain".
However, less than half the data on the open register, which can be purchased, is publicly available, so the hackers would have accessed data belonging to tens of millions of people who opted out of The Public list.
The Electoral Commission said it did not apply for Cyber Essentials in 2022.
" We Are always working to improve our cyber-security and systems and draw on the expertise of The National Cyber Security Centre - as many public bodies do - to continue to develop and progress protections against cyber-threats, " it said in a statement.
Related TopicsSource of news: bbc.com
