CA AB2748

Establishes a pilot program requiring the Office of Information Security, Office of Emergency Services, and California Military Department to conduct independent security assessments of Internet-connected election infrastructure in up to 5 participating counties.

Assessments must be completed by January 1, 2020, with county selection based on criteria including type of election system, cybersecurity resources, IT staffing, prior DHS evaluations, and voting population size.

Results and vulnerability mitigation recommendations must be transmitted to the county elections official and Secretary of State, with assessment information kept confidential during the evaluation process.

Requires a joint report to the Legislature by January 1, 2022, detailing assessed counties, assessment costs, performance metrics, and legislative recommendations.

Sunsets the pilot program on January 1, 2023, and requires the program to be funded by federal or other available funds before implementation.