ACDT calls for immediate forensic audit of EC’s IT systems

The Africa Center for Digital Transformation (ACDT) has issued a strong warning, urging the Electoral Commission of Ghana (EC) to conduct an immediate and comprehensive forensic audit of its IT systems.

At a press conference held on October 14, 2024, ACDT’s Executive Director, Kwesi Atuahene, raised the alarm over the security vulnerabilities within the EC’s IT infrastructure, which could potentially compromise the integrity of the upcoming elections.

The EC has come under scrutiny recently, with several key political stakeholders raising concerns about discrepancies in the Provisional Voter Register (PVR) and cyberattack risks.

The ACDT’s call for a forensic audit follows a trend of increasing digital threats worldwide, with electoral bodies becoming prime cyberattack targets. “There is evidence of cyberattacks targeting institutions worldwide, including the Electoral Commission of Ghana,” Atuahene noted.

He added that without a thorough forensic audit, the electoral process could be compromised, potentially affecting the outcome of the election.

This press statement arrives on the heels of an earlier one from the EC, in which Chairperson Jean Mensa acknowledged “network errors” during the extraction of data for the PVR, which led to a corruption of voter data.

While the EC claims these errors were rectified, the ACDT remains concerned. According to Atuahene, “a forensic audit is the surest way of ensuring a free and fair election,” underscoring the need for transparency and security.

At the heart of the ACDT’s concerns is the EC’s reliance on external individual IT consultants for critical technological functions. The ACDT argues that this persistent outsourcing not only undermines the development of in-house IT expertise but also poses serious data security risks.

“The habit of consistently engaging external individual consultants poses significant risks to the integrity of Ghana’s national elections, especially if there are concerns of direct relationships with political actors,” Atuahene emphasized.

The ACDT also pointed out that the use of external consultants weakens local IT capacity and presents a financial burden on taxpayers. According to Atuahene, “continuous dependence on external individuals stifles opportunities for Ghanaians to acquire the skills and experience needed to manage sophisticated electoral systems.” The lack of a robust internal IT team familiar with the EC’s systems could lead to disruptions, especially during crucial phases like voter registration and vote collation.

The National Democratic Congress (NDC), Ghana’s largest opposition party, has also been vocal about its dissatisfaction with the EC’s handling of the voter register and other key electoral processes. The party’s leadership has repeatedly called for reforms to ensure a transparent election, citing irregularities in the voter registration process and concerns over IT vulnerabilities.

In a statement from the party’s General Secretary, Fifi Kwetey, the NDC questioned the EC’s refusal to allow independent experts to examine its IT systems, expressing fears that these weaknesses could be exploited to influence the election outcome.

In response to these growing concerns, civil society organizations, including the Coalition of Domestic Election Observers (CODEO), have backed the call for a forensic audit. CODEO’s representative, David Adjei, stressed the importance of safeguarding the credibility of the election: “This is not just about the EC or political parties—it’s about protecting our democracy and ensuring that every vote counts.”

Despite the mounting pressure, the EC has remained firm in its stance. In a press statement dated September 25, 2024, the EC assured Ghanaians that errors identified in the PVR would be addressed in the final voter register. However, the ACDT remains skeptical, highlighting that the reliance on external consultants introduces too many variables into an already complex electoral process. “The management of sensitive electoral data should remain within the oversight of trusted and accountable internal personnel,” Atuahene insisted.

To mitigate future risks, the ACDT recommends that the EC invest in local IT talent, strengthen its internal IT capacity, and prioritize national interests when making decisions about its technological infrastructure. The center argues that building a sustainable IT framework within the EC is a long-term investment in Ghana’s democracy, ensuring that the country’s electoral processes remain transparent, credible, and free from external influence.

As election day approaches, the EC finds itself at the center of a national debate on the integrity of the electoral process. The stakes are high, and any missteps could have far-reaching consequences for the nation’s democracy. The calls for a forensic audit are not just a technical demand but a reflection of the deep-seated anxieties surrounding the upcoming elections.

Kwesi Atuahene’s closing remarks echoed a sentiment felt by many across the political spectrum: “A robust, transparent, and secure electoral process is fundamental to the health of our democracy.”

Whether the EC will heed the call for a forensic audit remains to be seen, but one thing is clear: public confidence in the electoral process is non-negotiable. As the clock ticks down to December 2024, all eyes will be on the EC to ensure that the election is conducted fairly, transparently, and without the shadow of IT vulnerabilities looming over the results.

ACDTforensic auditIT systems