E Terms — Election Security Glossary

Electronic commerce. Trade conducted, or facilitated by, the Internet. (UK 2016)

(e-gov) (C. F. D.) The use by the U. S. Government of web-based Internet applications and other information technology. Rationale: General definition of a commonly understood term

Device that partially automates the process of checking in voters, assigning them the correct ballot style, and marking voters who have been issued a ballot. May be used in place of a traditional pape…

The act of casting any ballot in a public election or referendum on an electronic voting machine.

A designation by the Executive Director of the ELECTION ASSISTANCE COMMISSION that a voting system conforms to the VOLUNTARY VOTING SYSTEM GUIDELINES as determined through testing by a VOTIMG SYSTEM T…

Criminal activity that involves the use of computers or networks such as the internet

Any mark in electronic form associated with an electronic document, applied with the intent to sign the document.

The centralized voter registration system of Kansas. An acronym for “Election Voter Information System.

A comprehensive approach to risk management that engages people, processes, and systems across an organization to improve the quality of decision making for managing risks that may hinder an organizat…

ETS refers to a program developed by FVAP in 2007 to expand the use of e-mail and fax voting for military and overseas voters after the cancellation of the SERVE Project in 2004. Security and privacy …

BALLOT CONFIGURATION, and for each REPORTING CONTEXT, is the same as the number of such voters authorized to vote with thos e ballot configurations[s], in those reporting contexts. This mitigates the …

(C) if purchased with funds made available under title II on or after January 1, 2007, meet the voting system standards for disability access (as outlined in this paragraph).” 42 U. S. C. §15481(a)(3)…

A BALLOT cast by an EARLY VOTER. Alaska Stat. §16-545.

A RECOUNT that begins less than 18 hours after noti ce of recount is given, by consent of the necessary participants. Texas Elec. Code §213.010.

“[A] voter who votes in person before electi on day, and not by mail.” N. M. Stat. Ann. §1-1- 5.1.

Voting before election day where the voter completes the ballot in person at an elections office or other designated polling site prior to election day. Early voting can also include voting with a mai…

A group of individuals, authorized by local authorities, who are charged with participating in or observing elections and voting procedures prior to election day.

Physical location where individuals may cast a ballot before election day under the supervision of election workers.

An official responsible for overseeing early voting.

Hidden functionality within an application program, which becomes activated when an undocumented, and often convoluted, set of commands and keystrokes are entered. Easter eggs are typically used to di…

An attack in which an Attacker listens passively to the authentication protocol to capture information which can be used in a subsequent active attack to masquerade as the Claimant. (SP 800-63) (NISTI…

EMPB-capable optical scanner An “OPTICAL SCANNER used to count EMPBs.” 2007 VVSG.

ESLATE Cryptographic MODULE. eCM Manager A program used to generate cryptographic keys for use in digital signatures in the Hart InterCivic eSlate system.

A “computer generated listing of the names and ballot position numbers for each candidate and proposition as they appear in the program for each precinct.” 10 Ill. Comp. Stat. §5/24A2. Similarly in Mi…

An interface of a VOTING DEVICE which permits a voter to modify and/or correct a ballot before it is cast. See also CORRECTION OF BALLOT.

Education integrates all of the security skills and competencies of the various functional specialties into a common body of knowledge. and strives to produce IT security specialists and professionals…

In the NICE Framework, cybersecurity work where a person: Conducts training of personnel within pertinent subject domain; develop, plan, coordinate, deliver, and/or evaluate training courses, methods,…

Time span during which each COMSEC key edition (i.e., multiple key segments) remains in effect.

Filtering of outgoing network traffic. (SP 800-41) (NISTIR)

“65 years of age or older.” 42 U. S. C. §1973ee-6. Some states provide for special facilities for elderly voters, such as places to rest and a styl us with a large, easily graspable handle. Mont. Admi…

The act of choosing a person to hold public office through a public election.

Candidates who received the highest or requisite number of votes in an election for public office.

An office that is filled primarily or exclusively via election.

Individuals who have been elected to hold public office or candidates appointed in lieu of being elected to a public office.

Elected positions have set terms of usually two, four, or six years. If there is a vacancy in the middle of a term, a candidate will be elected and only hold office until the end of the original term.…

A formal process of selecting a person for public office or of accepting or rejecting a political proposition by voting.

The organization or body responsible for the administration of elections in a jurisdiction; e.g., Elections BC, individual local governments.

The act of managing, running, and overseeing an election.

An official within an election administration, such as the Chief Election Officer, Chief Electoral Officer, or District Electoral Officer.

An evaluation and analysis of any election or voting process.

COMMISSION, provides for federal funds for jurisdictions to upgrade their voting systems, sets up a scheme for testing voting systems and impos es new standards on voting systems used in election for …

Election Assistance Commission was created by the Help America Vote Act (HAVA) to assist the states regarding HAVA compliance and to distribute HAVA funds to the states. The EAC is also charged with c…

Commission was created by the Help America Vote Act (HAVA) to assist the states regarding HAVA compliance and to distribute HAVA funds to the states. The EAC is also charged with creating voting syste…

The official responsible for overseeing elections in a jurisdiction.

The election official in charge of a precinct in Mississippi. Miss. Code §23-15-231.

The official presentation of all of the contests to be decided in a particular election. Either in paper or electronic format, the mechanism for voters to show their voter preferences.

A group of individuals appointed, usually by local authorities, and charged with control of elections and voting procedure.

A “person appointed to assist in the conduct of an election.” Nev. Rev. Stat. §293.050.

The “record of registered voters provided to election boards.” Nev. Rev. Stat. §293.053. Election Canvassing Commission The chief canvassing body in Florida, composed of the Governor, Secretary of Sta…

The official list of key dates and voting deadlines for an election.

A series of democratic activities to influence a political vote for or against candidates or ballot questions.

Documents submitted by pollworkers that report the counts of cast and voided ballots, and of voters, in each precinct.

The act of confirming the final official results of a jurisdiction’s election. This event occurs after results from valid ballots are tallied from all sources (election day, absentee voting, early vot…

Any person who is involved with administering or conducting an election, including government personnel and temporary election workers. This may include any county clerk and recorder, election judge, …

An electronic record required to be produced when a election is closed out so equipment can be reset for a subsequent election. 2007 VVSG.

The official laws that govern the electoral process.

See Election Programming.

A group of individuals appointed, usually by local authorities, and charged with overseeing elections and voting procedure.

A county official appointed in large Nebraska counties to supervise elections. Nebraska Stat. §32-207. A local election official in Louisiana. “T he clerk of the district court is ex officio parish cu…

A single decision or set of associated decisions being put before the voters (for example, the option of candidates to fill a particular public office or the approval or disapproval of a constitutiona…

A situation requiring the holding of a REPEAT ELECTION. Iowa Admin. Code §721-21.1(15).

Anything of value given, loaned, or advanced to influence a political vote for or against candidates or ballot questions.

A feature of a SIGNATURE MODULE that “maintains a running count of each [ELECTION SIGNATURE KEY] generated. 2007 VVSG.

1. In general, the “period between the beginni ng of a general election and the end of the following general election.” N. M. Stat. Ann. §1-1-3.1. The “period beginning on the first day persons are el…

Election DATA Exchange

Election DATA Manager

“A data file or set of files that contains geographic information about political subdivisions and boundaries; all contests and questions to be included in an election; and the candidates for each con…

Data file or set of files that contain geographic information about political subdivisions and boundaries, all contests and questions to be included in an election, and the candidates for each contest…

The last day on which voters may cast a ballot. Absentee ballots and early voting ballots may be cast in advance of Election Day.

An official whose responsibilities begin and end on the day of an election.

The process of registering voters not in advance, but on ELECTION DAY, available in Idaho, Maine, Minnesota, Wisconsin and Wyoming.

A POLL WORKER, in the District of Columbia.

Definition of the contests and questions that will appear on the ballot for a specific election.

Programmed memory component containing all applicable election definition data required by an election system device.

Contiguous geographic area represented by a public official who is elected by voters residing within the district boundaries. The district may cover an entire state or political subdivision, may be a …

The “electronic records or the print out reflecti ng said electronic records as designated by the respective county department of elections.” 15 Del. Code §101(23). Election Division In Indiana, the p…

The department of government charged with administering elections.

Any “occurrence, or threat thereof, whether acci dental, natural, or caused by human beings, in war or in peace, that results or may result in substantial injury or harm to the population or substanti…

All of the necessary items to conduct elections and voting. This can include technology such as electronic poll books, voting machines, and other non-technical equipment including voting booths and vo…

The misrepresentation or alteration of the true results of an election.

Information and communications technology and systems used by or on behalf of the federal government or a state or local government in managing the election process, including voter registration datab…

The official responsible for the proper and orderly voting at a polling location or an election process.

An election that is professional, impartial, and transparent in its preparation and administration throughout the electoral cycle.

“The state executive committee of any political party authorized to conduct political party primaries shall form an election integrity assu rance committee for each congressional district.” In the eve…

The official responsible for the proper and orderly voting at a polling location or an election process.

A geographical area to which a practical authority has been granted to administer elections for political or administrative offices. Areas of jurisdiction apply to local, state, and federal levels. St…

A feature of a SIGNATURE MODULE that creates and outputs a r ecord when the private key components of an [ELECTION SIGNATURE KEY] is destroyed. 2007 VVSG.

A set of items that election officials need to assist voters at a voting location.

The official laws that govern the electoral process.

“The Secretary of State shall designate at l east one (1) member of his staff to become knowledgeable of the election laws as they pertain to elections in the State of Arkansas for the purpose of answ…

Set of processing functions and databases within a voting system that defines, develops and maintains election databases, performs election definitions and setup functions, format ballots, count votes…

“The election marshal shall preserve order at the polls and permit no violation of the election laws and for that purpose is vested with powers of a constable from the opening of the polls until the c…

Items needed to assist voters and conduct an election.

The status of an electronic voting machine, i.e. whether it is set for pre-election testing, post- election testing, or actual voting in an election. Cf. ELECTION STATE.

A web-based system that aggregates and displays unofficial election results across the jurisdiction. ENR systems can be real-time or near-real-time, and acquire their data from the EMS. ENR systems ca…

The act of tabulating votes on the night of the election, after the polls have been closed for voting.

A person “designated by the county political part y central committee chair person to observe the counting of ballots and related electi ons procedures.” Wash. Admin. Code §434-260- 020(12).

An official responsible for administering an election or an election process.

Any person who is involved with administering or conducting an election, including government personnel and temporary election workers. This may include any county clerk and recorder, election judge, …

The people associated with administering and conducting elections, including government personnel and poll workers.

A legal term used when an authorized government authority proclaims that an election will take place at a particular time.

Election administration division corresponding to a contiguous geographic area that is the basis for determining which contests and issues the voters legally residing in that area are eligible to vote…

The official responsible for the proper and orderly voting at a polling location or an election process.

Process by which election officials or their designees use voting system software to logically define the ballot for a specific election.

A digital certificate created at the time an ELECTION SIGNATURE KEY is created for each TABULATOR. The certificate is signed with the signing (private) key corresponding to the election signature key.…

An electronic record created when the signing key corresponding to an ELECTION SIGNATURE KEY is destroyed. See CRYPTOGRAPHY.

A “unique code generated for each election and transferred to every IVOTRONIC and PEB to be used for that election.” 2004 Pa sco ESP 6. The code is a computer-generated eight digit number that is spec…

“‘Election records’ includes but is not limited to accounting forms, certificates of registration, pollbooks, certificates of election, signature cards, all affidavits, absentee voter applications, ab…

The list of voters who presented themselves for voting at a polling place. Election Reporting Manager An ES&S tabulation and results reporting program that is part of the UNITY suite. Abbreviated ERM.

An official who is responsible for election administration.

Election Reporting Manager

A web-based election management system that includes the following functionalities: candidate filing and ballot question entry; election night reporting (ENR) of results and statistics; post-election …

Tallies of votes cast in an election after the polls have been closed for voting.

A board appointed “to prepare the final unoffici al election results report for posting at each precinct and at the computer center.” Mont. Admin. Rules §44.3.1774.

A tabulation report produced after the closing of polls for the purpose of publicizing the vote counts.

A system that:

Tallies of votes cast in an election after the polls have been closed for voting.

The “process of examining all or a part of a county's election policies and procedures and includes the review of any documentation of those procedures.” Wash. Admin. Code §434- 260-020(1).

A security mechanism using strategically placed serialized or tamperproof evident materials that alert officials if a device used in the elections process has potentially been altered or accessed with…

The “electronic records generated by election ta bulation software during election setup to define ballots, tabulation instructions, and other functions related to the election.” Col. Code §1-7-510(1)…

An officer responsible for maintaining order at the polls. “Each election sheriff shall do the following: (1) Except as provided in subsection (b), attend the polls in the appointed precinct from the …

Election Signature KEY

A feature of a SIGNATURE MODULE that maintains count of the number of times an ELECTION SIGNATURE KEY is generated. 2007 VVSG.

With respect to the Sequoia Advantage system, a process step within an ELECTION MODE.

An official responsible for administering an election or an election process.

Such “blank books, blank forms, pamphlets and th ings other than ballots and equipment as may be necessary to enable the provisions of [t he election law] to be carried out properly.” N. J. Stat. Ann.…

A technology-based system that is used to collect, process, and store data related to elections and election administration. In addition to voter registration systems and public election websites, ele…

The small number of corporations that sell and license voting systems to governments at all levels of government within the United States.

Election Systems AND Software

A person, usually a Native American, who perfor ms language translation services at a New Mexico polling place.

“Confirmation that all recorded votes we re counted correctly.” See, generally, VERIFICATION.” 2007 VVSG.

Any person who interacts with those coming to vote. This includes any poll worker, election day worker, early voting worker, or other temporary staff engaged in supporting the voting or vote counting …

The “calendar year within which a particular election is held.” Me. Rev. Stat. §21-A-1(15).

Internet Protocol (IP) address or e-mail in an attempt to mislead the recipient as to the origin of the original communication or as a means of malicious redirection. systems, and embedded processors …

(c) The election involves precincts not regularly voting by mail at primary and general elections.” Wash. Admin. Code §434-238-020(2). See also Mont. Code §13-19-205.

Used in response messages. ElectionAdministration optionally includes ContactMethod to specify contact information for the election authority. Attribute Multiplicity Type Attribute Description {Contac…

Used in request messages. Implementation of BallotRequest in which a ballot for a single election event is requested. Attribute Multiplicity Type Attribute Description {Election} 1 Election The electi…

The activity of trying to persuade people to vote for or against a particular candidate, measure or political party.

Any “activity which is intended to influence voti ng at an election.” Wisc. Stat. §12.03(4). In is generally a CRIME to attempt to influence voters within a certain distance from a POLLING PLACE. “Ele…

An official who is responsible for election administration.

The usual name for the Office of the Chief Electoral Officer. Elections BC administers the electoral process in B. C. This includes provincial general elections, by-elections and provincial referenda.…

An office that is filled primarily or exclusively via election.

(1) A person qualified to vote in an election. (2) A person appointed by a state in the U. S. to vote for president and vice president in the electoral college.

A candidate to be appointed by a state in the U. S. to vote for president and vice president in the electoral college.

A group of individuals appointed, usually by local authorities, and charged with control of elections and voting procedure.

A body of people representing the states of the U. S., who formally cast votes for the election of the president and vice president.

The time period from the first official act in an election to the last official act. The electoral cycle is divided in three main periods: the pre-electoral period, the electoral period, and the post-…

One of the geographic areas into which a country, local authority or supranational institution may be divided for electoral purposes. See also Circonscription, Constituency, Electorate (b) and Riding.…

“An area set off for election purposes. It may in clude the entire State.” Me. Rev. Stat. §21-A- 1(16).

That part of the electoral system dealing specifically with the translation of votes into seats.

One or more pieces of legislation governing all aspects of the process for electing the political institutions defined in a country’s constitution or institutional framework.

The organization tasked under electoral law with the responsibility for the conduct of elections. The EMB in most countries consists either of an independent commission appointed for the purpose or of…

Rules subsidiary to legislation made, often by the electoral management body, under powers contained in the electoral law which govern aspects of the organization and administration of an election.

That part of the electoral law and regulations which determines how parties and candidates are elected to a body as representatives. Its three most significant components are the electoral formula, th…

Votes cast by members of the electoral college.

All the people in a political jurisdiction who are entitled to vote in an election.

A test for susceptibility of an ELECTRONIC DEVICE to power surges resulting from switching loads in other circuits. It consists of a “burst of repetitive fast transients with a waveform of 5/50 ns, ea…

Abbreviated EEPROM.

The ability of an ELECTRONIC DEVICE to work properly when connected to other devices in a given electromagnetic environment without advers ely affecting or being affected by them. 2007 VVSG. Abbreviat…

DEVICES associated with voting systems may be targ eted by malware. Malware is inclusive of viruses, worms, Trojan horses, and malicious m obile code, as well as combinations of these, known as blende…

(e- authentication) The process of establishing confidence in user identities electronically presented to an information system.

DISPLAY or AUDIO BALLOT READER to: (1) mark a nonelectronic ba llot with votes selected by a voter; or (2) securely transmit a ballot electroni cally to automatic tabulating equipment in the polling p…

The delivery of ballot and voter information packets electronically. The MOVE Act requires each state to provide for the electronic delivery (via fax, email, or an Internet supported application) of b…

A “graphic representation of a ballot on a comput er monitor or screen on which a voter may make vote choices for candidates and questions for the purpose of marking a nonelectronic ballot or securely…

Subsystem within a voting system which communicates ballot information to a voter in video, audio, or other alternative format.

“[E]quipment that is part of an el ectronic voting system that uses an

DRE-like device that fully prints paper- based ballots with selected vote choices for tabulation by a separate ballot scanner.

The return of a voted ballot or voter information packet using electronic means. This can be by fax, email, or through the use of an Internet supported application. Sometimes referred to as “Internet …

Doing business online. Rationale: Term is general and not specific to IA.

Permanent record of all votes produced by a single voter in electronic form.

Digital documents used in authentication that bind an identity or an attribute to a subscriber's authenticator.

Device that uses electronic or electromechanical components.

And disconnecting equipment. It cons ists of a power “surge with a 0.5 μs rise time and a decaying oscillation at 100 kHz with a first peak voltage of 6 kV between the line and neutral terminals, and …

Information and data of investigative value that is stored on or transmitted by an electronic device. (SP 800-72) (NISTIR)

A COMSEC item used to transfer or store key in electronic form or to insert key into cryptographic equipment.

The entry of cryptographic keys into a cryptographic module using electronic methods such as a smart card or a key-loading device. (The operator of the key may have no knowledge of the value of the ke…

An interoperable collection of systems that automate the planning, ordering, generating, distributing, storing, filling, using, and destroying of electronic key and management of other types of COMSEC…

Services providing interpersonal messaging capability; meeting specific functional, management, and technical requirements; and yielding a business- quality electronic mail service suitable for the co…

Device that partially automates the process of checking in voters, assigning them the correct ballot style, and marking voters who have been issued a ballot. May be used in place of a traditional pape…

Information recorded by a computer that is produced or received in the initiation, conduct, or completion of an agency or individual activity. Examples of electronic records include: e-mail messages, …

A “RECOUNT of electronic voting system ballots on automatic tabulating equipment.” Texas Elec. Code §214.041.

An ERT system is used to electronically create stationary source sampling test plans and reports. The ERT calculates the test results from data imported or hand-entered and includes supporting documen…

See digital signature. Rationale: Deprecated Term: Given that there is no current consensus on its definition, it is recommended that "digital signature" be used instead, if that context is what is in…

Any storage of electronic user data on a computer, computer network, or computer system regardless of whether the data is subject to recall, further manipulation, deletion, or transmission. Electronic…

A “computer disk or other information st orage and retrieval medium approved by the [Maryland] State Board.” Md. Election Code Ann. §1-101(x).

A “ballot designed for use with an electronic voting system.” Texas Elec. Code §121.003(9).

The electronic count of votes recorded on individual voting machines, or as aggregated by precinct or polling place, or at the central or county level.

The use of “hardware and software components to send data over distances both within and external to the polling place and to receive an accurate copy of the transmission.” Iowa Admin. Code §721-22.1(…

Election system that encompasses DREs as well as accessible ballot printers (ABPs) when they are combined with the ballot scanner that processes the printed ballot. See also Voter Verified Paper Audit…

“A system in which votes are recorded on an electronic ballot or on a paper ballot or on a ballot card by means of marking or by means of punching, and such votes are subsequently counted and tabulate…

A “voting system which records and counts votes and produces a tabulation of the vote count using one ballot card imprinted on either or both faces with text and voting response locations. The marksen…

A “device used to electronically scan a marked paper ballot for the purposes of tabulation;.” Ark. Code §7-1-101(9).

The counting of votes by electronic means. Abbreviated EVT.

Subsystem within a voting system which communicates ballot information to a voter in video, audio, or other alternative format which allows the voter to select candidates and issues by means of vocali…

Voting that uses electronic means to either aid or facilitate casting and counting votes.

Electronic voting system with accessible features, including touchscreen and audio, that gives voters with disabilities the ability to cast a secret ballot without assistance.

A five-member committee that oversees electronic voting in Alabama, consisting of a representative appointed by the Secretary of Stat e, a representative appointed by the Attorney General and one judg…

Any system that utilizes an electronic component. Term is generally used to refer to DREs.

An electronic voting system is one or more integrated devices that utilize an electronic component for one or more of the following functions: ballot presentation, vote capture, vote recording, and ta…

“‘Electronic voting system device’ means a single unit of an electronic voting system.” N. D. C. C. §16-1-06-12(6).

Any “BALLOT other than a paper ballot that is physically marked by the voter using a writing instrument or a mechanical device.” Alaska Stat. §15.60.010(6).

Key generated in a COMSEC device by introducing (either mechanically or electronically) a seed key into the device and then using the seed, together with a software algorithm stored in the device, to …

Election results tabulated on an electronic device.

Machines that provide assistance to voters who are visually-impaired, who have difficulty reading English, or in other cases where a voter has difficulty correctly marking by hand a preprinted paper b…

All of the legal requirements to hold a public office.

Candidates who have completed all of the things necessary and meet all of the legal requirements to participate in an election process.

The universe of all voters who, if they cast a ballot, would have the legal right to have eligible contests on that ballot tabulated. This would include those who do not appear in the list of eligible…

Qualified VOTER. A “person who possesses all of the qualifications necessary to entitle the person to be registered to vote, whether or not the person is in fact so registered.” Iowa Code §39.3(6)

In B. C., an individual who meets the qualifications for voting; in some jurisdictions, an individual who is registered to vote, or registered for Internet voting.

The universe of all voters who, if they cast a ballot, would have the legal right to have eligible contests on that ballot tabulated. This would include those who do not appear in the list of eligible…

A person who meets the requirements set forth in a political subdivision for being able to vote.

Protection resulting from measures taken to deny unauthorized individuals information derived from intercept and analysis of compromising emissions from crypto-equipment or an information system. See …

Computer system that is an integral part of a larger system. Rationale: Listed for deletion in 2010 version of CNSS 4009.

Cryptosystem performing or controlling a function as an integral element of a larger system or subsystem. (CNSSI-4009) (NISTIR)

Cryptography engineered into an equipment or system whose basic function is not cryptographic. (CNSSI-4009) (NISTIR)

A situation requiring postponement of ordinary election activities. “The governor may, upon issuance of an executive order declaring a state of emergency or impending emergency, suspend or delay any q…

(EAP) A plan developed to prevent loss of national intelligence; protect personnel, facilities, and communications; and recover operations damaged by terrorist attack, natural disaster, or similar eve…

A ballot issued to a voter under special circumstances, such as being out of state during an election or being displaced because of a natural disaster.

Paper ballots that should be on hand in polling places where DRE voting machines are the standard method of voting. Emergency paper ballots should be used when DREs are inoperable, or when long lines …

In Colorado, an application for voter registra tion received after the registration books have been closed for a particular election. Colo. Rev. Stat. §1-2-217.5.

A “modification to correct a vital, but defective, part of a program or the program's executable image, as used in the voting system. The modifi cation must correct a defect that would prevent an elec…

An upper bound on the power than an ELECTRONIC DEVICE is permitted to radiate, to avoid interference with nearby devices. 2007 VVSG.

The component of communications security that results from all measures taken to deny unauthorized persons information of value that might be derived from intercept and analysis of compromising emanat…

Empb-capable Optical Scanner

See encrypt. Rationale: Deprecated Term: Encrypt is the preferred term.

A set of system resources that operate in the same security domain and that share the protection of a single, common, continuous security perimeter.

Point at which an enclave’s internal network service layer connects to an external network’s service layer, i.e., to another enclave or to a wide area network (WAN).

To put something inside of something else, such as enclosing an absentee ballot in a secrecy sleeve.

A PORT through which electromagnetic radiation and disturbance may pass. 2007 VVSG.

Use a system of symbols to represent information, which might originally have some other representation. Example: Morse code.

A device used by a POLL WORKER to activate a VOTER ACCESS CARD with information concerning the appropriate ballot style to be presented to the voter.

The process of translating binary characters into representing characters (e.g., letters and numbers).

In the 2007 VVSG, “is encouraged” indicates “an opti onal recommended action.” See also SHOULD. Cf. MAY.

Cryptographically transform data to produce cipher text.

Key that has been encrypted in a system approved by the National Security Agency (NSA) for key encryption.

A network on which messages are encrypted (e.g., using DES, AES, or other appropriate algorithms) to prevent reading by unauthorized parties. (SP 800-32) (NISTIR)

Process of obscuring information by changing plain text into ciphertext for the purpose of security or privacy.

Set of mathematically expressed rules for rendering data unintelligible by executing a series of conversions controlled by a key.

A certificate containing a public key that can encrypt or decrypt electronic messages, files, documents, or data transmissions, or establish or exchange a session key for these same purposes. Key mana…

Encryption FILE SYSTEM

A “data processing card which instructs the comput er that all ballots of a precinct have been counted.” 31 Ky. Admin. Regs. §2:010(1)(15).

Device that 1) performs cryptographic functions, 2) typically is part of a larger system for which the device provides security services, and 3) from the viewpoint of a supporting security infrastruct…

When the manufacturer or integrator of an IT component ceases to produce and provide technical support for that product. Election officials who use technologies that are EOL’d, should monitor availabl…

Accounting for all the accountable components of a COMSEC equipment configuration by a single short title.

1. With reference to security, “supporting both VOTER VERIFICATION and ELECTION VERIFICATION.” 2007 VVSG. 2. Referring to the “entire elections process, fr om election definition through the reporting…

The ability of a voting system to provide ACCESSIBILITY for all aspects of a VOTING SESSION. A HUMAN FACTOR identified in the 2007 VVSG.

Communications encryption in which data is encrypted when being passed through a network, but routing information remains visible.

Safeguarding information in an information system from point of origin to point of destination.

1. A candidate having an ENDORSEMENT, i.e. one who has been nominated by a political party. 2. A candidate having more that one ENDORSEMENT, i.e. a candidate who is CROSS- ENDORSED, which requires spe…

An act of giving one's public approval or support to someone or something, such as a candidate for public office or a ballot measure question.

A display format that is an alternative visual format supporting personal screen display choices such as text size, color contrast, and preferred language.

The management role that is responsible for assigning user identities to management and non-management roles.

An organization with a defined mission/goal and a defined boundary, using information systems to execute that mission, and with responsibility for managing its own risks and performance. An enterprise…

A strategic information asset base that defines the mission, the information necessary to perform the mission, the technologies necessary for performing the mission, and the transitional process for i…

A cross domain solution provided as a system across an enterprise infrastructure, fully integrated to provide the ability to access or transfer information between two or more security domains.

An organization that establishes, manages and maintains the overall infrastructure an d security posture offering automated capabilities to users and applications within an enterprise environment for …

The methods and processes used by an enterprise to manage risks to its mission and to establish the trust necessary for the enterprise to support shared missions. It involves the identification of mis…

A set of one or more computer applications and middleware systems hosted on computer hardware that provides standard information systems capabilities to end users and hosted mission applications and s…

A point-to-point cross domain solution (CDS) that is managed by an enterprise cross domain service (ECDS) provider that may be available to additional users within the enterprise with little or no mod…

Access rights assigned to employees base on job title, department, or other established criteria.

Either a subject (an active element that operates on information or the system state) or an object (a passive element that contains or receives information). (SP 800-27) (NISTIR)

Entity-relationship diagram is a data modeling technique that creates a graphical representation of the entities, and the relationships between entities, within an information system.

Deliberate planting of apparent flaws in an IS for the purpose of detecting attempted penetrations. (CNSSI-4009) (NISTIR)

A measure of the amount of uncertainty that an Attacker faces to determine the value of a secret. Entropy is usually stated in bits. (SP 800-63) (NISTIR)

An envelope used in administering absentee voting. Identifiable information about the voter is written on the outside of the envelope. A secrecy envelope containing a

Aggregate of external procedures, conditions, and objects affecting the development, operation, and maintenance of an information system. (FIPS 200; CNSSI-4009) (NISTIR)

The physical, technical, and organizational setting in which an information system operates, including but not limited to: missions/business functions; mission/business processes; threat space; vulner…

That the app has reached the end of its useful life. It may mean that a new version is available that supersedes the existing product or that the product is no longer supported.

A cryptographic key that is generated for each execution of a key establishment process and that meets other requirements of the key type (e.g., unique to each message or session). In some cases, ephe…

Equipment or systems that have been certified to meet the applicable level of NSTISSAM TEMPEST/1-92 or previous editions. Typically categorized as Level 1 for the highest containment of classified sig…

Process intended to render magnetically stored information irretrievable by normal means.

Used in response messages. RequestRejection includes this class to describe the errors that caused the rejection. Attribute Multiplicity Type Attribute Description OtherError 0.1 String Used when Name…

Coding system that allows data being read or transmitted to be checked for errors and, when detected, corrects those errors.

Coding system that allows data being read or transmitted to be checked for errors and, when detected, corrects those errors.

A code computed from data and comprised of redundant bits of information designed to detect, but not correct, unintentional changes in the data.

The capability to alert a voter that a DOCUMENT BALLOT has been improperly voted (e.g. contains an OVERVOTE), before she leaves the polling place. This is done by inserting the ballot into a counting …

Ratio of the number of errors that occur to the volume of data processed.

The maximum allowable number of errors that can occur to the volume of data processed, as established by an official authority.

An attack where the attacker is using some means to bypass security controls in order to attain a higher privilege level on the target system.

Something (e.g., a document, an encryption key) that is "delivered to a third person to be given to the grantee only upon the fulfillment of a condition." (FIPS 185) (NISTIR)

A form of PROVISIONAL BALLOT in Massachusetts that is not counted unless an election is contested.

Any “business certified by the Secretary of State to store source code.” Cal. Regs. §20625.

The “physical location in which the source code may be stored. No election jurisdiction may act as an escrow facility to store its own source code.” Cal. Regs. §20624.

A REPOSITORY which holds software it receives until formal requests for the software are received and approved.” 2007 VVSG.

A DRE product of Hart Intercivic.

A physical USB device containing a cryptographic key used in the Hart InterCivic eSlate system for controlling access to administrative functions. Abbreviated ECM.

A “political party which, at either of the last two general elections, polled for its candidate for any statewide office, more than two percent of the entire vote cast for the office.” Mo. Rev. Stat. …

An “unincorporated community that is in (1) the unorganized borough and that has 25 or more permanent residents; or (2) an organized borough, has 25 or more permanent residents, and (A) is on a road s…

A network protocol (IEEE 802.n) that is used to permit local area network devices to communicate with each other. Ethernet connections use a Cat 5e connector cable. Many of the devices used in polling…

(EPL) (C. F. D.) List of validated products that have been successfully evaluated under the Natio nal Information Assurance Partnership (NIAP) Common Criteria Evaluation and Validation Scheme (CCEVS).…

The official responsible for evaluating a reported COMSEC incident for the pos sibility of compromise.

(C. F. D.) Set of assurance requirements that represent a point on the Common Criteria predefined assurance scale. Rationale: NIAP has switched to a “protection profile” program to secure devices.

List of validated products that have been successfully evaluated under the National Information Assurance Partnership (NIAP) Common Criteria Evaluation and Validation Scheme (CCEVS). (CNSSI-4009) (NIS…

Any observable occurrence in a network or system.

Content that does not become dated

CONTEST included in a particular BALLOT STYLE and, when cast, serves as a CAST VOTE RECORD.” The “collection of votes produced by one voter in one VOTING SESSION (as in ‘ballot summary’ or ‘rejected b…

A technical review that makes the evidence visible and suitable for analysis; tests performed on the evidence to determine the presence or absence of specific data. (SP 800-72) (NISTIR)

A type of assessment method that is characterized by the process of checking, inspecting, reviewing, observing, studying, or analyzing one or more assessment objects to facilitate understanding, achie…

A person having authority to conduct a voting system examination for CERTIFICATION purposes. See, e.g., Mont. Admin. Rules §44.3.1701(g).

A hardware interface connects input/output devices. Humans and computers interact though user interfaces. A DRE presents an interface to the voter. This interface permits the voter to interact with th…

A BALLOT cast in excess of the number of voters who appeared at the polls. The states differ on what do to when it is determined that excess ba llots have been cast. Unfortunately, it is not feasible …

Evidence that tends to decrease the likelihood of fault or guilt. SOURCE: SP 800-72 Executive Agency – An executive department specified in 5 United States Code (U. S. C.), Sec. 101; a military depart…

An executive department specified in 5 U. S. C., Sec. 101; a military department specified in 5 U. S. C., Sec. 102; an independent establishment as defined in 5 U. S. C., Sec. 104(1); and a wholly own…

Executive Order that calls for the Federal Government to closely coordinate with critical infrastructure owners and operators to improve cybersecurity information sharing; develop a technology-neutral…

Cryptographic key material used exclusively to safeguard communications transmitted over-the-air during military or organized civil training exercises. (CNSSI-4009) (NISTIR)

The unauthorized transfer of information from an information system.

Refers to processing a ranked choice voting contest on a cast ballot, when that ballot becomes inactive and cannot be advanced in the tabulation for a contest because there are no further valid rankin…

A poll taken of a small percentage of voters as they leave the polls, used to forecast the outcome of an election or determine the reasons for voting decisions.

“A STANDARD RECEIVING BOARD … and one additional team of poll clerks.” W. Va. Code §3-1-29(a)(2).

Mark that falls wholly or partially inside a contest option target area.

Any data collected from monitoring and assessments as part of the information security continuous monitoring (ISCM) strategy.

A rapid statutory RECOUNT procedure available in offices in which a majority vote is required to win and votes were cast for more than two candidates. Texas Elec. Code §212.081. Sometimes the term is …

Report that details political expenses required to be filed by a governing authority.

Use of a VOTING SYSTEM that has not yet been CERTIFIED. “With the approval of the State Board, the governing body of any county, city, or town may provide for the experimental use at an election in on…

Software that takes advantage of a vulnerability to undermine a computer’s security.

(or exploit) A program, a script or a line of code with which vulnerabilities in a computer system can be used to advantage.

Channel that allows the violation of the security policy governing an information system and is usable or detectable by subjects external to the trusted computing base. See covert channel.

The act of extracting and gathering intelligence data.

In the NICE Framework, cybersecurity work where a person: Analyzes collected information to identify vulnerabilities and potential for exploitation.

Indicates that a malicious actor has conducted additional activities on a compromised system, such as collecting data, deploying more malware, or establishing persistent access. Some documents—within …

The condition of being unprotected, thereby allowing access to information or access to capabilities that an attacker can use to enter a system or network.

The process of revealing vote totals to the public at the close of voting at a POLLING LOCATION. Ark. Code §7-5-527.

When a person of authority extends by formal action the required number of hours that voters are able to vote, usually in response to a situation that delayed or restricted voting.

(XCCDF) A language for authoring security checklists/benchmarks and for reporting results of evaluating them.

A text-based language used to organize and present information on the World Wide Web (XML).

Such as "extension of period" or" extension of polling hours."

“That part of a CIRCULATION ROUTE from the street or parking area to the point of entry to the polling place building.” Mont. Admin. Rules §44.3.103(1)(e).

(or component) An information system or component of an information system that is outside of the authorization boundary established by the organization and for which the organization typically has no…

An information system service that is implemented outside of the authorization boundary of the organizational information system (i.e., a service that is used by, but not a part of, the organizational…

A provider of external information system services to an organization through a variety of consumer-producer relationships, including but not limited to: joint ventures; business partnerships; outsour…

A network not controlled by the organization.

A role intended to be performed by a manager who is typically a member of a key management infrastructure (KMI) customer organization.

Security testing conducted from outside the organization’s security perimeter. (SP 800-115) (NISTIR)

A mechanism by which voters who are permanently or temporarily absent from a country are enabled to cast a vote, also called out-of-country voting.

Used in request and response messages. BallotStyle, Election, Party and ReportingUnit optionally include this class for associating a jurisdiction’s codes, i.e., identifiers, with political parties or…

Capability of crypto-equipment or secure telecommunications equipment to resist efforts to extract key. (CNSSI-4009) (NISTIR)

A mark on a paper ballot that appears to be unrelated to the act of indicating a voter’s selection. Examples include: a mark made unintentionally by a voter that is obviously not related to making a s…

A computer network that an organization uses for application data traffic between the organization and its business partners.

One of a class of emergency situations that ma y result in the postponement of an election. A “natural occurrence, such as a rainstorm, windstorm, ice storm, blizzard, tornado or other weather conditi…