1. Short title This Act may be cited as the Strengthening Election Cybersecurity to Uphold Respect for Elections through Independent Testing Act or the SECURE IT Act . 2. Requiring penetration testing as part of the testing and certification of voting systems Section 231 of the Help America Vote Act of 2002 ( 52 U.S.C. 20971 ) is amended by adding at the end the following new subsection: (e) Required penetration testing (1) In general Not later than 180 days after the date of the enactment of this subsection, the Commission shall provide for the conduct of penetration testing as part of the testing, certification, decertification, and recertification of voting system hardware and software by accredited laboratories under this section. (2) Accreditation The Director of the National Institute of Standards and Technology shall recommend to the Commission entities the Director proposes be accredited to carry out penetration testing under this subsection and certify compliance with the penetration testing-related guidelines required by this subsection. The Commission shall vote on the accreditation of any entity recommended. The requirements for such accreditation shall be a subset of the requirements for accreditation of laboratories under subsection (b) and shall only be based on consideration of an entity’s competence to conduct penetration testing under this subsection. . 3. Independent security testing and coordinated cybersecurity vulnerability disclosure program for election systems (a) In general Subtitle D of title II of the Help America Vote Act of 2002 ( 42 U.S.C. 15401 et seq. ) is amended by adding at the end the following new part: 7 Independent security testing and coordinated cybersecurity vulnerability disclosure pilot program for election systems 297. Independent security testing and coordinated cybersecurity vulnerability disclosure pilot program for election systems (a) Establishment The Commission, in consultation with the Secretary, shall establish an Independent Security Testing and Coordinated