> I mean the government doesn't take on basic IT security responsibilities for corporations. It's up to each campaign. Couldn't the DHS provide recommendations

> I mean the government doesn't take on basic IT security responsibilities for corporations. It's up to each campaign. Couldn't the DHS provide recommendations (e.g. practices, particular providers and configurations), and the parties provide turnkey solutions to their candidates and elected officials? It seems foolish to leave such decisions up to such small, short-term groups that shouldn't be expected to have the IT expertise to pick a good vendor.