A Guide to Enhancing Election Security Using Effective TPRM | UpGuard

This report is a practical guide on securing election infrastructure through Third-Party Risk Management (TPRM), covering vendor due diligence, continuous monitoring of assets, incident response and recovery planning, contractual security controls, and recommended best practices (paper ballots, access control, training, and software validation). It highlights the primary cyber threats to elections—phishing, ransomware, and DDoS—references existing resources (CISA, EAC, GCA, Mandiant), and emphasizes ongoing vendor oversight and preparedness to reduce supply-chain and third-party risks.