R Terms — Election Security Glossary

A software product of Hart Intercivic used to run satellite collection sites, allowing CAST VOTE RECORDS to be read from MOBILE BALLOT BOX PC Cards and transmitted over a modem to the TALLY station at…

See Role-Based Access Control. (NISTIR)

Date that is not protected by encryption. Also known as unencrypted data.

A term applied to equipment that processes unencrypted national security information that requires protection during electrical/electronic processing.

Key that has not been encrypted in a system approved by NSA for key encryption or encrypted key in the presence of its associated key encryption key (KEK) or transfer key encryption key (TrKEK). Encry…

An optical fiber or a metallic wire that carries a RED signal or that originates/terminates in a RED equipment or system.

Any electronic emission (e.g., plain text, key, key stream, subkey stream, initial fill, or control signal) that would divulge national security information if recovered.

A metallic wire that carries a RED signal or that originates/terminates in a RED equipment or system.

See Radio Frequency Identification.

A real-time operating system (RTOS) is an OS that guarantees real-time applications a certain capability within a specified deadline.

Contest between candidates

(RFID) A form of automatic identification and data capture (AIDC) that uses electric or magnetic fields at radio frequencies to transmit information. SOURCE: SP 800-98

A public process of manually tallying a percentage of votes, selected at random by the elections official, and typically involves a defined minimum number of precincts or races. This procedure is cond…

A device or algorithm that outputs a sequence of binary bits that appears to be statistically independent and unbiased. An RBG is either a DRBG or an NRBG. (SP 800-90A) (NISTIR)

A “mark on a ballot (other than the

(RNG) A process that is invoked to generate a random sequence of values (usually a sequence of bits) or an individual random value.

A set of numbers generated by numerous people, including members of the public, rolling a ten-sided dice to generate the random sequence of ballots to be audited in a risk-limiting audit.

A list of ballots to be audited, chosen at random (see Technical Details: Random Selection for more detail). ͳͶ For more information, contact [email protected]

1. The process of maintaining CAST VOTE RECORDS in a manner that prevents associating a particular record with a specific voter. 2. The process of scrambling the order in which candidates in a RACE ar…

A process used in California to determ ine the ordering of candidates within RACES on the BALLOT. “The Secretary of State shall conduct a dr awing of the letters of the alphabet, the result of which s…

In some states, a voting machine “must be cap able of producing in random order a paper copy of each ballot cast on the system.” N. D. C. C. §16.1-06-14(14).

Analog or digital source of unpredictable, unbiased, and usually independent bits. Randomizers can be used for several different functions, including key generation or to provide a starting state for …

A vote variation for single-seat contests, in which voters give each candidate a score, the scores are added or averaged, and the candidate with the highest total is elected.

A voting method in which the voter indicates bot h a first and a second choice of candidate for an office. If no candidate receives a majority of the first-place votes, the second-place votes are adde…

A vote variation which allows each voter to rank contest options in order of the voter’s preference, in which votes are counted in rounds using a series of runoff tabulations to defeat contest options…

A vote variation which allows each voter to rank contest options in order of the voter’s preference, in which votes are counted in rounds using a series of runoff tabulations to defeat contest options…

A “method of casting and tabulating votes that a llows electors to rank the candidates for an office in order of preference and uses these preferences to determine the winner of the election. ‘Ranked …

Rankedchoice VOTING

Malware that holds the victim’s device (computer, phone, etc.) and data for ransom (a sum of money or other payment), by means of encrypting the files on the device or preventing access to the device.

Malware that holds the victim’s device (computer, phone, etc.) and data for ransom, by means of encrypt- ing the files on the device or preventing access to the device. Election office computers shoul…

(also referred to as “ballot images” or “vote vectors”) Raw vote data is data that is stored per cast ballot. This kind of data shows how each voter voted for each race in an election. Raw vote data c…

To elect for another term to the same public office.

(a certificate) The process of creating a new certificate with a new validity period, serial number, and public key while retaining all other Subscriber information in the original certificate.

Fundamental operation in an information system that results only in the flow of information from an object to a subject. (CNSSI-4009) (NISTIR)

Permission to read information in an information system. (CNSSI-4009) (NISTIR)

(opscan) A ballot that has been processed but may not have been tabulated correctly or at all.

Cast ballot that has been successfully accepted and initially processed.

Abbreviated ROM. See also EEPROM.

A HUMAN FACTOR concerned with determining the clarity of ballot text to the voter. Alaska has a practice of scoring ballot proposition language to determine its readability on a numerical scale. Alask…

A “ballot that the certified vote tallying syst em can accept and read as the voter intended without alteration, and that meets the standard s of the county canvassing board subject to the provisions …

The action of repeating an audio representation of the selections made by a voter. 2007 VVSG.

In Texas, a person who reads the BALLOT to a voter with a visual or reading disability. Tex. Admin. Code §81.56.

A report detailing the fitness of a voting system component to perform properly in an election. If the component is a PROGRAMMED DEVICE, the device itself must generate the report. 2007 VVSG. Cf. STAT…

A VOTING STATE of a VOTE-CAPTURE DEVICE after polls have been opened and the device has been placed in ACTIVATED STATE but is not in IN USE state. Simply put, in the ready state the device is ready fo…

Immediate response to a penetration attempt that is detected and diagnosed in time to prevent access.

Each touchscreen DRE must have a realtime clock “capable of recording and documenting the total time polls are open in a precinct and capab le of documenting the opening and closing of polls.” N. M. S…

To appoint for another term to the same public office.

To assign or distribute seats differently in a legislative body based on changes in population.

The process by which seats in a legislative body are distributed among administrative divisions based on changes in population.

Process that allows voters to remove elected representatives from office prior to the expiration of their terms of office.

A “committee formed by persons sponsoring the reca ll of an elected official which represents the sponsors and signers of a RECALL PETITION in matters relating to the recall effort.” N. J. Stat. Ann. …

An election in which the question of whether to remove an elected official from office before their term is completed appears on the ballot for approval or rejection.

The “official authorized by law to receive nominating petitions for an elective office, except that with respect to the recall of the county clerk, it means the Secretary of State.” N. J. Stat. Ann. §…

Refers to the reasons that citizens would begin the process to remove an elected official from office in a political recall.

Process that allows voters to remove elected representatives from office prior to the expiration of their terms of office. The recall may involve not only the question of whether a particular officer …

The procedure by which citizens can gather signatures from voters, using an official form, to propose a recall election directly to a governing body.

Process that allows voters to remove elected representatives from office prior to the expiration of their terms of office.

The general statement included on a petition, when attempting to gather signatures from voters for a recall election, which describes the reason for seeking a recall election.

Vote cast in a recall election.

Process that allows voters to remove elected representatives from office prior to the expiration of their terms of office.

Recorded ballot that can be individually retrieved and included or excluded from further processing.

A procedure to check the validity of the CANVASS. 31 Ky. Admin. Regs. §4:070. “Whenever the canvassing board finds that there is an appa rent discrepancy or an inconsistency in the returns of a primar…

A required report containing an accounting for ba llots received, voted, spoiled, etc. S. D. Admin. Code §5:02:09:16.

A randomly generated code that can be used by the voter after casting a ballot to ensure the vote is received and processed correctly by the voting system.

The property of a voting system in not generating any RECEIPT which would enable the voter to prove to any other person how she voted in the election

A “subdivision of the counting board consisting of at least two (2) individuals responsible for receiving the sealed ballots at the counting center on election night”. Wyo. Sec’y of State Rule 1570, §…

A certificate, executed by the RECEIVING BOARD, attesting to the fact that a TRANSFER CASE or BALLOT BOX was properly sealed when received. 31 Ky. Admin. Regs. §2:010(17)(7).

A group of individuals appointed, usually by local authorities, and charged with control of an elections procedure, such as receiving voted ballots, voting material or voting equipment from poll worke…

The “ELECTION JUDGE that checks the voter's name in the official register, provides the voter with a ballot, and removes the ballot stub from the ballot after the voter has voted.” Utah Code §20A-1-10…

A “site which is located at a building or place ot her than where the counting center is located.” 31 Ky. Admin. Regs. §2:010(1)(20).

A certificate, executed by the RECEIVING BOARD, attesting to the fact that a TRANSFER CASE or BALLOT BOX was properly sealed when received. 31 Ky. Admin. Regs. §2:010(17)(7). Cf. RECEIVING BOARD CERTI…

A team that receives ballot boxes as they ar e brought in for tabulation. Tenn. Rules §1360-2- 9-.01(a).

Re-examination, and possibly retesting of a voting system that was modified subsequent to receiving national and/or state certification. The object of this is to determine if the system as modified st…

Pertaining to VOTING MACHINES, a “verification procedure where the center counter compartment door of the voting machine is opened and the results of the balloting as shown on the counters of the mach…

The period of time during the cryptoperiod of a symmetric key when protected information is processed. (SP 800-57) (NISTIR)

Mutual agreement among participating enterprises to accept each other’s security assessments in order to reuse information system resources and/or to accept each other’s assessed security posture in o…

An accounting or auditing process that compares two sets of records to check that figures are consistent, accurate, and complete.

An action to discover malicious tools or vulnerabilities in a targeted system or network.

Preserved evidence of activities performed or results achieved; also, to create a record.

Preserved evidence of activities performed or results achieved (for example, forms, reports, test results).

To document an action or create a record.

A ballot for which there is an associated cast vote record.

A counter that records “the total number of votes cast for each candidate and for and against each question at any particular time.” Mo. Rev. Stat. §115.251.

One of the judges, “who tally the votes recei ved by each candidate and for and against each question at a polling place.” Mo. Rev. Stat. §115.447(3).

A machine that allows an voter to indicate choi ces and that also counts those choices. A “type of voting machine which is a single unit designed to permit a voter to "enter" the privacy booth of a vo…

Recordings of evidence of activities performed or results achieved (e.g., forms, reports, test results), which serve as a basis for verifying that the organization and the information system are perfo…

The process for tagging information for records keeping requirements as mandated in the Federal Records Act and the National Archival and Records Requirements.

An additional count of the votes cast in an election, typically required due to state law, a candidate request, or a court order, that is used to determine the accuracy of the reported results of an e…

A board that supervises the conduct of a RECOUNT. “The responsibility of a recount board is to tabulate all votes for the office in question on ballots that were counted by the precinct election offic…

A body that actually performs a RECOUNT. “Before beginning a recount, each RECOUNT SUPERVISOR shall appoint a recount committee co mposed of as many members as the supervisor determines are necessary …

The “authority to whom a petition for an INITIAL RECOUNT or an EXPEDITED RECOUNT is submitted.” Texas Elec. Code §211.002(6).

A cash deposit required to cover the costs of a RECOUNT. Texas Elec. Code §211.002(9).

A “petition for an INITIAL RECOUNT, a petition for an EXPEDITED RECOUNT, an application for a SUPPLEMENTARY RECOUNT, or an application for including remaining paper ballot precincts” in a RECOUNT. Tex…

The “authority designated … to manage and supervise a RECOUNT in election precincts in the jurisdiction of a local canvassing authority.” Texas Elec. Code §211.002(7).

The member of the RECOUNT COMMITTEE “designated to operate the equipment” in an ELECTRONIC RECOUNT. Texas Elec. Code §214.045(a).

The activities after an incident or event to restore essential services and operations in the short and medium term and fully restore all capabilities in the longer term.

The point in time to which data must be recovered after an outage. (SP 800-34) (NISTIR)

Actions necessary to restore data files of an information system and computational capability after a system failure.

The overall length of time an information system’s components can be in the recovery phase before negatively impacting the organization’s mission or mission/business functions. (SP 800-34) (NISTIR)

Team A group of people authorized and organized to emulate a potential adversary’s attack or exploitation capabilities against an enterprise’s security posture. The Red Team’s objective is to improve …

A group of people authorized and organized to emulate a potential adversary’s attack or exploitation capabilities against an enterprise’s security posture.

An exercise, reflecting real-world conditions, that is conducted as a simulated attempt by an adversary to attack or exploit vulnerabilities in an enterprise's information systems.

Separation of electrical and electronic circuits, components, equipment, and systems that handle unencrypted information (Red), in electrical form, from those that handle encrypted information (Black)…

The process by which seats in a legislative body are distributed among administrative divisions based on changes in population.

The drawing of a red stripe on a counted ballot by a pen in an OPTICAL SCANNER. See CANCEL.

Additional or alternative systems, sub-systems, assets, or processes that maintain a degree of overall functionality in case of loss or failure of another system, sub-system, asset, or process.

A “verification of the original computer count of ballots by another count using compatible equipment or other means as part of a discove ry recount, including a count of the permanent paper record of…

Multiple copies of the same records stored in distinct locations on separate media. 2007 VVSG.

In most states, a voting system once certifie d remains certified. Some state provide for automatic expiration of certification, e.g. Tenness ee, which requires recertification every eight years. Tenn…

Reference DATA SET

The security engineering term for IT functionality that— 1) controls all access, 2) cannot be bypassed, 3) is tamper-resistant, and 4) provides confidence that the other three items are true. SOURCE: …

The plural of Referendum, which is a process whereby a state law or constitutional amendment may be referred to the voters before it goes into effect.

Process whereby a state law or constitutional amendment may be referred to the voters before it goes into effect.

A formal written request signed by voters, to refer a state law or constitutional amendment to the voters before it goes into effect.

Proposals to enact new laws or constitutional amendments that are placed on the ballot for approval or rejection by voters.

Vote cast in a referendum election.

A “BALLOT QUESTION or BALLOT ISSUE submitted by the general assembly or the governing body of any political subdivision to the eligible el ectors of the state or political subdivision.” Col. Stat. §1-…

"(I) the name (including the first name and any

The process for restoring capabilities after a successful, large scale cyberspace attack, ideally in a way that prevents future attacks of the same nature.

A situation in which one party wins all, or nearly all, of the seats in a particular geographic region or a country.

To complete a form with information to be added to an electoral roll for the jurisdiction where a voter resides, as a prerequisite for being entitled to vote.

To complete a form with information to be added to an electoral roll, sent through the mail, to the jurisdiction where a voter resides, as a prerequisite for being entitled to vote.

To complete a form with information to be added to an electoral roll for the jurisdiction where a voter resides, as a prerequisite for being entitled to vote.

A voter who is listed on an electoral roll for the jurisdiction where a voter resides.

Registered VOTER

DULY Registered VOTER. A “ REGISTERED VOTER who resides at the address listed on the Board's records.” D. C. Code Ann. §1-1001.02(20). Also QUALIFIED REGISTERED ELECTOR.

A voter who is listed on an electoral roll for the jurisdiction where a voter resides.

Has not been classified as an INACTIVE VOTER by the county clerk.” Utah Code §20A-1- 102(1). ActiveX control A format for executable code that is downloaded to a client computer from a web page.

A “registering device on a voting machine that reco rds the votes cast for a particular candidate or for or against a particular MEASURE.” Texas Elec. Code §121.003(8).

An official who is responsible for election administration.

An official who is responsible for election administration.

An official who is responsible for election administration.

The “record of registered voters kept by the county clerk.” Nev. Rev. Stat. §293.0925.

A term used by election officials when referring to a voter's record.

An official sworn statement of information used to register to vote by voters. This is sometimes referred to as a Voter Registration Card.

An official sworn statement of information used to register to vote by voters. This is sometimes referred to as a Voter Registration Card.

1. An entity authorized by the certification authority system (CAS) to collect, verify, and submit information provided by potential Subscribers which is to be entered into public key certificates. Th…

A list of the individuals that have registered on an electoral roll where a voter resides, as a prerequisite for being entitled to vote.

An official sworn statement of information used to register to vote by voters.

An official document providing proof of registration.

The serial number associated with a voter's registration on an electoral roll.

A list of the individuals that have registered on an electoral roll where a voter resides, as a prerequisite for being entitled to vote.

The last day to complete the documents to become a registered voter to participate in a specific election or election process.

An official sworn statement of information used to register to vote by voters. This is sometimes referred to as a Voter Registration Card.

“‘Registration list’ means the list of elector s who are properly registered to vote in municipalities in which registration is required.” Wisc. St. §5.02(17).

A required notification under UOCAVA (as amended) to each ABSENT UNIFROMED SERVICES VOTER and each OVERSEAS VOTER whose VOTER REGISTRATION APPLICATION or ABSENTEE BALLOT REQUEST has been rejected. 42 …

The “ REGISTRAR, assistant registrar and alternate regi strars appointed by the departments.” Del. Code §101(19).

An official who is responsible for election administration.

In Indiana, a record of eligible electors maintained by a BOARD OF REGISTRATION.

A term used by election officials to describe whether a voter's record shows that the voter is eligible to vote. Status terms include: Active, Inactive, Canceled, and others.

A form voters use to supply information to be added to an electoral roll, sent through the mail, to the jurisdiction where a voter resides, as a prerequisite for being entitled to vote.

To complete a form with information to be added to an electoral roll, sent through the mail, to the jurisdiction where a voter resides, as a prerequisite for being entitled to vote.

A “county clerk, his deputies, a tr ibal clerk, his deputies, a city clerk, his deputies, and an election judge during any election.” Wyo. Stat. §22-1-102(a)(xxviii).

The “list by precinct of registered electors in the county prepared by the county clerks.” Wyo. Stat. §22-1-102(a)(xxix).

A trusted process explicitly authorized to re-classify and re-label data in accordance with a defined policy exception. Untrusted /Unauthorized processes are such actions by the security policy.

An “ABSENTEE BALLOT provided to voters or electors who re quest an absentee ballot and who do not either request or qualify for an ONGOING ABSENTEE BALLOT, HOSPITAL ABSENTEE BALLOT, or SPECIAL ABSENTE…

A “BALLOT that is not a PROVISIONAL BALLOT.” Utah Code §20A-1-102(59).

This term has no consistent meaning because “regular” can imply either “ordinary” or “regularly scheduled.” An “election or a re ferendum held at a regular time prescribed by statute.” Me. Rev. Stat. …

The “election held throughout the Territory on the Tuesday next after the first Monday in November in each even numbered year.” 3 Guam Code Ann. §1106. Cf. GENERAL ELECTION, which has a special meanin…

The “election on the fourth Tuesday of June of each even-numbered year, at which candidates of political parties and nonpolitical groups are voted for nomination.” Utah Code 20A-1- 102(62).

A vote “cast by registered voters, except votes cast by ABSENT BALLOT.” Nev. Rev. Stat. §293.093.

A BALLOT that is issued to a voter to correct an e rror in the printing or issuing of the original ballot.

A ballot which has been cast but cannot be counted due to a defect or ineligibility of the voter.

To change the value of a cryptographic key that is being used in a cryptographic system/application. (CNSSI-4009) (NISTIR)

The order in which CANDIDATES in a RACE appear on the BALLOT.

A relay is a system acting as an interim station for the provision of a service. In connection with malware and spam, relays are used to conceal the real sender and prevent blocking. Open SMTP relays …

Prefix appended to the short title of U. S.-produced keying material to indicate its foreign releasability. "A" designates material that is releasable to specific allied nations and" U. S." designates…

A “ CONTEST appearing in a BALLOT STYLE or ballot associated with a given REPORTING CONTEXT. … If a contest is included in a ballot style associated with a given reporting context, that contest is rel…

The “probability that an item will perform a required function, under stated conditions, for a stated period of time.” Cal. Proc. §1843.

“The form of MARK on a ballot that will be detected and counted each and every time the ballot is run through a tabulating machine, irresp ective of which voting target is being marked, and irrespecti…

“The form of MARK on a ballot that will never be detected or counted no matter when the ballot is run through a tabulating machine, irresp ective of which voting target is being marked, and irrespecti…

An entity that relies on the validity of the binding of the Subscriber’s name to a public key to verify or establish the identity and status of an individual, role, or system or device; the integrity …

With respect to INSTANT RUNOFF VOTING, “a candidate who has not been eliminated.” Wash. Rev. Code §29A.053.030(8).

Residual information remaining on storage media after clearing. See magnetic remanence and clearing.

The act of mitigating a vulnerability or a threat.

A plan to perform the remediation of one or more threats or vulnerabilities facing an organization’s systems. The plan typically includes options to remove threats and vulnerabilities and priorities f…

Access to an organizational information system by a user (or a process acting on behalf of a user) communicating through an external network (e.g., the Internet).

A mechanical, electromechanical, or electronic system and its software that is used for the sole purpose of marking an electronic vote by mail ballot remotely, outside a polling location, for a voter …

Maintenance activities conducted by authorized individuals communicating through an external network (e.g., the Internet).

Electronic voting in which voters do not physica lly appear at a polling place, but vote by transmitting their choices electronically to a collection point. Abbreviated REV.

Maintenance activities conducted by individuals communicating external to an information system security perimeter. (SP 800-18) (NISTIR)

Procedure by which a distant crypto-equipment is rekeyed electrically. See auto matic remote rekeying and manual remote rekeying.

A location other than a jurisdiction’s CENTRAL COUNT facility at which votes are accumulated and tabulated. Remote sites are common in la rge jurisdictions such as cities where such concerns as traffi…

A mechanism by which voters are enabled to cast a vote which does not involve their attendance at a polling station on the day or days fixed for voting. See also Out-of-country voting.

A technology that allows a program to interact with the internals of another program running on a different machine

Portable data storage medium that can be added to or removed from a computing device or network.

When a candidate has withdrawn, been disqualified, or passed away, or when there is a formal process to remove a candidate from a ballot or from public office.

A “person, who was formerly a resident of one of the counties of this State but who has, or shall have, removed to another state, the Distri ct of Columbia, Puerto Rico, Guam, the Virgin Islands or to…

The act or process of extending the validity of the data binding asserted by a public key certificate by issuing a new certificate. (SP 800-32) (NISTIR)

NSA-approved change to a COMSEC end-item that does not affect the original characteristics of the end-item and is provided for optional application by holders. Repair actions are limited to minor elec…

The removal or reversal of a law.

An election that is held again because of an irreparable irregularity that renders it impossible to determine the winner. Iowa Admin. Code §721-21.1(15).

Ability to obtain independent test results by using the same testing method on identical test items in the same testing laboratory by the same operator using the same equipment within short intervals …

A key on a keyboard or virtual keyboard whic h, when held down or continuously pressed, causes more than one instance of its correspondi ng character to be generated or transmitted. Repeating keys on …

The ability of a VOTING STATION to repeat upon request any information it provides to the voter. Under the 2007 VVSG, an AUDIO-TACTILE INTERFACE must provide repetition.

“The county auditor may issue replacement ABSENTEE BALLOTS to a registered voter who claims that the ballot originally issued was de stroyed, spoiled, lost, or not received. The voter may request a re…

The HAVA term for a ballot given to a voter to replace a SPOILED BALLOT. 42 U. S. C. §15481(A)(1)(a)(ii).

An attack that involves the capture of transmitted authentication or access control information and its subsequent retransmission with the intent of producing an unauthorized effect or gaining unautho…

Intentionally taking over the account of an owner or maintainer who hosts a repository

Self-contained, time-stamped, archival record that is produced at a specific time and subsequently protected from modification.

“Any one of the numeric values (totals or counts) that must appear in any of the vote data reports. Each ballot count … and each vote, overvote and undervote total for each candidate or measure … is a…

The “absolute value of the difference between the correct value and the reported value” of a REPORT ITEM. 2007 VVSG. If a value is reported that s hould not have appeared at all (a spurious item), or …

The “sum of all of the REPORT ITEM ERRORS from all of the reports” produced by a voting system. 2007 VVSG.

Ratio of the report total error to the report total volume.

The “sum of all of the correct values for all of the REPORT ITEMS that are supposed to appear in the reports” produced by a voting system. 2007 VVSG.

A report of the tallies of votes cast in an election after the polls have been closed for voting.

The “scope within which reported to tals or counts are calculated (e.g., PRECINCT or ELECTION DISTRICT). … Reporting contexts may overlap in comp lex ways; for example, in the case of SPLIT PRECINCTS,…

Any category of voters whose ballots are totaled separately, such as ABSENTEE VOTERS or MILITARY VOTERS.

Geographical area in which reported totals or counts are reported.

Used in response messages. RequestSuccess and VoterRecord include this class so as to provide a list of geopolitical geography associated with the voter’s registration, e.g., the voter’s precinct, pol…

Used in request and response messages. Enumeration for the type of geopolitical unit, used in the Type sub-element in the ReportingUnit element. Name Value ballot-batch Used for reporting batches of b…

A database containing information and data relating to certificates as specified in a CP; may also be referred to as a directory. (SP 800-32) (NISTIR)

An arrangement whereby one is enabled to speak and act with authority on the behalf of another.

A type of democracy founded on the principle of elected persons representing a group of people, as opposed to direct democracy. Representative democracy places power in the hands of representatives wh…

Typical of a particular group of people.

(1) A person who has been chosen to speak or vote for somebody else or on behalf of a group. (2) A member of the House of Representatives, the lower house of Congress.

In each representative district, “the clerk of that town or part of a town having the largest population in the district. However, when part of one town is joined with all of another town to form a re…

Administrative area in which voters are entitled to vote in contests that are specific to that area.

Individuals appointed by candidates to observe voting and counting on behalf of candidates at a voting place. Candidate representatives make sure that election rules are followed and that the counting…

Ability to obtain the same test results by using the same test method on identical test items in different testing laboratories with different operators using different equipment.

(deprecated) Obtaining QUALIFICATION anew following a revocation of qualification.

Used in response messages. For indicating that the request was received but action on the request is pending.

One who requests a RECOUNT. Iowa Admin. Code §721-26.100(50).

Used in response messages. Enumeration for registration-related errors, used in the Error attribute of RegistrationRejection. Name Value identity-lookup-failed A lookup on the voter’s identity failed.…

Used in request messages. Enumeration for types of registration forms, used in the RegistrationForm attribute of VoterRecordsRequest. Name Value fpca For the Federal Post Card Application form. nvra F…

Used in request messages. VoterRecordsRequest optionally includes this element to specify information about a request helper, i.e., a request assistant or witness involved in a voter’s request. Reques…

Used in request messages. Enumeration for the method used by the voter to register, used in the RequestMethod attribute of VoterRecordsRequest. Name Value armed-forces-recruitment-office The voter ass…

Used in request messages. VoterRecordsRequest optionally includes this class to specify information about a request proxy involved in a voter records request. OriginTransactionId can be used to includ…

Used in request messages. Enumeration for the registration proxy, e.g., the MVA/DMV, involved in the voter’s registration request, used in the Type attribute of RegistrationProxy. Name Value armed-for…

Used in response messages. For indicating that the request failed. The Error attribute is used to indicate the type of error that occurred. The AdditionalDetails attribute can be used to provide more …

Used in response messages. For indicating a successful response to a request. The Action attribute is used to indicate the action that occurred, which may differ from what was requested. For example, …

HAVA. 42 U. S. C. §15483. When is the unique identifier not unique? When it’s in New Mexico: “As used in the Election Code ‘unique identifier’ means the last four digits of a voter's social security n…

Provision that conveys criteria to be fulfilled.

The fundamental collection of activities and functions that must be supported by a system. Defining requirements determines the capabilities of the system. Election officials must be able to articulat…

All of the legal requirements to hold an elected office.

To complete a form to update your information on an electoral roll for the jurisdiction where a voter resides, as a prerequisite for being entitled to vote.

The “submission of a registration form by a voter whose registration was inactivated on the MASTER REGISTER … and the director's reactivation of that registration.” Alaska Stat. 15.60.010(33).

Key held to satisfy unplanned needs. See contingency key.

A spare machine kept in reserve in the even t it is found that a machine is configured incorrectly for the election. W. Va. Code §3-4A-17.

Seats in which a determinable criterion such as religion, ethnicity, language or gender is a requirement for nomination or election.

A voter’s place of residence is critical to determining where she may vote and for which candidates she is eligible to vote. The “pri ncipal or primary home or place of abode of a person. Principal or…

The place in which a voter's habitation is fixed, wherein the person has the intention of remaining, and to which, whenever they are absent, the person has the intention of returning. Persons experien…

The rules that govern if an individual is entitled to become a candidate or vote, based on where they live, and how long they have lived there.

A citizen of a foreign nation, legally residing in the United States on a permanent basis, who is not yet a naturalized citizen of the United States.

“[P]ermanent computerized instructions whic h are built into any approved voting machine or equipment and which control the recordation, a ggregation, tabulation, storage and printing of votes by any …

Ensur(ing) that any data contained in a resource is not available when the resource is de- allocated from one object and reallocated to a different object.

Portion of risk remaining after security measures have been applied.

Vote that could not be allocated to a specific contest option due to an undervote or overvote.

Data left in storage after information processing operations are complete, but before degaussing or overwriting has taken place.

Total number of votes that cannot be counted for a specific contest. There may be multiple reasons for residual votes (e.g., overvoting in a contest, failure to cast ballot before leaving polling plac…

The ability to recover gracefully from error conditions and unexpected circumstances.

The ability to recover gracefully from error conditions and unexpected circumstances. For example, manually marked paper preserves evidence of exceptions that can advise both adjudication and audit to…

A statement of policy by the governing body or an order by the governing body that a specific action be taken.

A “board at an automatic tabulating location co mprised of a representative from each political party having a candidate on the ballot and whos e candidate on the county-wide ballot at the last genera…

Method by which the reference monitor mediates accesses to an information system resource. Resource is protected and not directly accessible by a subject. Satisfies requirement for accurate auditing o…

“Any state or local election official whose actions are alleged, in a written

The entity that responds to the initiator of the authentication exchange. (FIPS 196) (NISTIR)

The activities that address the short-term, direct effects of an incident and may also support short-term recovery.

The potential for an unwanted or adverse outcome resulting from an incident, event, or occurrence, as determined by the likelihood that a particular threat will exploit a particular vulnerability, wit…

An information distribution approach whereby relevant essential information is made readily available and discoverable to the broadest possible pool of potential users.

A trustworthy person designated by a sponsoring organization to authenticate individual applicants seeking certificates on the basis of their affiliation with the sponsor. (SP 800-32) (NISTIR)

The process of changing the status of a suspended (i.e., temporarily invalid) certificate to valid.

The process of restoring voting rights to people who lost their voting rights under felony disenfranchisement or for any other reason that might have disqualified them from voting.

A LIMITED BALLOT, a PRESIDENTIAL BALLOT or FEDERAL BALLOT. Tex. Elec. Code §111.001.

All data concerning (i) design, manufacture, or utilization of atomic weapons; (ii) the production of special nuclear material; or (iii) the use of special nuclear material in the production of energy…

Tallies of votes cast in an election after the polls have been closed for voting.

A removable memory device on which totals and/or BALLOT IMAGES are stored for later uploading to a tabulation machine.

A paper tape printed at the conclusion of voti ng containing the total number of votes cast for each candidate and upon each question.

The “process of running ballots back through the tabulation system for an additional time or times for the express purpose of reconciling the count.” Wyo. Stat. §22-1-102(a)(xlii). “If the difference …

The process of adding up once again the votes obtained from individual voting machines.” Ariz. Rev. Stat. §16-641. Cf. RECOUNT.

(opscan) A pad situated between the input hopper and the ballot path on an optical scanner to prevent more than one BALLOT at a time from passing through the machine.

In elections for federal office, election ADMINISTRATORS must preserve for 22 months “all records and paper that came into [their] posse ssion relating to an application, registration, payment of poll…

An election to determine whether various incumb ents, typically judges, should be retained in office.

A periodic process whereby voters are asked whether an incumbent (usually a judge) should remain in office for another term. The office holder, who does not face an opponent, is removed from the posit…

Recorded ballot that can be individually retrieved and included or excluded from further processing.

An official envelope used to transport absentee and mailed ballots and protects voter privacy.

In Missouri, a JUDGE who returns election materials to the county office following an election.

A document on which vote totals from a PRECINCT are recorded.

The official responsible for transmitting RETURNS to the appropriate state body.

Tallies of votes cast in an election after the polls have been closed for voting.

Reposting content by another user on Twitter, with or without an additional comment

The front or back of a flat object which has two sides, such as a ballot card.

A visualization for the voter of her entire selec tion of ballot choices, “for the voter to review before the vote is actually cast.” Texas El ec. Code §129.001(b) (referred to therein as a “screen in…

1. A “BALLOT that is flagged or separated for some form of manual processing.” 2007 VVSG. An example is an optical scan ballot containing a hand-written write-in, which must be interpreted by a human.…

Ballot that has been reviewed before it is cast, to determine what contest selections and, if applicable, unselected contest options it contains.

The process of permanently ending the binding between a certificate and the identity asserted in the certificate from a specified time forward.

The process of conducting an election a second time. This may be necessary in the event of a machine malfunction. La. Rev. Stat. Ann. §18:1433.

A synonym for electoral district used in some countries. See Electoral district.

A set of legal and constitutional protections designed to ensure the opportunity to vote in free and fair elections.

The process of restoring voting rights to people who lost their voting rights under felony disenfranchisement or for any other reason that might have disqualified them from voting.

Cryptographic algorithm specified in the Advanced Encryption Standard (AES). (FIPS 197) (NISTIR)

A measure of the extent to which an entity is threatened by a potential circumstance or event, and typically a function of: (i) the adverse impacts that would arise if the circumstance or event occurs…

(RAdAC) A form of access control that uses an authorization policy that takes into account operational need, risk, and heuristics.

The process of identifying the risks to system security and determining the probability of occurrence, the resulting impact, and the additional safeguards that mitigate this impact. Part of risk manag…

The process of identifying the risks to system security and determining the probability of occurrence, the resulting impact, and safeguards that would mitigate this impact.

A risk assessment process, together with a risk model, assessment approach, and analysis approach. (SP 800-30) (NISTIR)

(RAR). The report which contains the results of performing a risk assessment or the formal output from the process of assessing risk.

The individual, group, or organization responsible for conducting a risk assessment.

An individual or group within an organization that helps to ensure that (i) security risk- related considerations for individual information systems, to include the authorization decisions for those s…

The largest statistical probability that, if an outcome is wrong, the RLA does not correct that outcome. For example, assume the reported outcome of an election contest is wrong, and the risk limit fo…

The program and supporting processes to manage information security risk to organizational operations (including mission, functions, image, reputation), organizational assets, individuals, other organ…

(RMF) A structured approach used to oversee and manage risk for an enterprise.

Prioritizing, evaluating, and implementing the appropriate risk-reducing controls/countermeasures recommended from the risk management process.

A key component of a risk assessment methodology (in addition to assessment approach and analysis approach) that defines key terms and assessable risk factors. (SP 800-30) (NISTIR)

Maintaining ongoing awareness of an organization’s risk environment, risk management program, and associated activities to support risk decisions. (SP 800-30; SP 800-39) (NISTIR)

Accepting, avoiding, mitigating, sharing, or transferring risk to organizational operations (i.e., mission, functions, image, or reputation), organizational assets, individuals, other organizations, o…

A specific action taken to respond to an identified risk. (SP 800-39) (NISTIR)

The level of risk an entity is willing to assume in order to achieve a potential desired result.

Post-election tabulation audit procedure for checking a sample of ballots (or voter verifiable records) that provides a pre-specified statistical chance of correcting the reported outcome of an electi…

A structured approach to managing risks to data and information by which an organization selects and applies appropriate security controls in compliance with policy and commensurate with the sensitivi…

Risk-limiting audits provide statistical assurance that election outcomes are correct by manually examin- ing portions of paper ballots or voter-verifiable paper records.

Procedure for checking a sample of ballots (or voter verifiable records) that is guaranteed to have a large, pre-specified chance of correcting the reported outcome if the reported outcome is wrong (t…

A wireless security network that only allows the creation of Robust Security Network Associations (RSNAs). (SP 800-48) (NISTIR)

A logical connection between communicating IEEE 802.11 entities established through the IEEE 802.11i key management scheme, also known as the four-way handshake. (SP 800-48) (NISTIR)

The ability of an information assurance (IA) entity to operate correctly and reliably across a wide range of operational conditions, and to fail gracefully outside of that operational range.

An unauthorized node on a network. (SP 800-115) (NISTIR)

A job function or employment position to which people or other system entities may be assigned in a system.

(RBAC) Access control based on user roles (i.e., a collection of access authorizations a user receives based on an explicit or implicit assumption of a given role). Role permissions may be inherited t…

“Card stock in web form, trimmed to a width of 3 1/4 inches or multiples thereof. Rolls are normally produced as an intermediate step in the production of unfinished ballot cards.” Cal. Regs. §20209.

Difference between number of votes cast for contests in the higher offices on the ballot and the number cast for contests that are lower on the ballot. It sometimes referred to as voter fatigue.

A principle-based, systems approach for the identification of underlying causes associated with a particular set of risks. (SP 800-30; SP 800-39) (NISTIR)

In a hierarchical public key infrastructure (PKI), the certification authority (CA) whose public key serves as the most trusted datum (i.e., the beginning of trust paths) for a security domain.

In a hierarchical Public Key Infrastructure, the Certification Authority whose public key serves as the most trusted datum (i.e., the beginning of trust paths) for a security domain. (SP 800-32; CNSSI…

See privileged user.

A set of tools used by an attacker after gaining root-level access to a host to conceal the attacker’s activities on the host and permit the attacker to maintain root-level access to the host through …

An official register of electors entitled to vote at an election, used to verify and check in voters prior to issuing them a ballot.

An electromechanical device that essentially converts analog angular position information into digital output. Used as the basis of Hart InterCivic eSlate’s voter selection wheel. Abbreviated ROE.

See BALLOT ROTATION.

Round keys are values derived from the Cipher Key using the Key Expansion routine; they are applied to the State in the Cipher and Inverse Cipher. (FIPS 197) (NISTIR)

A device that determines the best path for forwarding a data packet toward its destination.

A method for compromising midpoint network infrastructure—such as routers—rather than specific computers or networks, to illicitly observe, redirect, tamper with, impede, or in some other way adversel…

A security policy based on global rules imposed for all subjects. These rules usually rely on a comparison of the sensitivity of the objects being accessed and the possession of corresponding attribut…

Detailed guidelines and constraints regarding the execution of information security testing. The ROE is established before the start of a security test, and gives the test team authority to conduct de…

A table of instructions used by a controlled interface to determine what data is allowable and how the data is handled between interconnected systems.

(opscan) A horizontal or vertical line on an opti cal scan ballot used for visual separation of ballot components.

Election to select a winner following a primary or a general election in which no candidate in the contest received the required minimum percentage of the votes cast. The two candidates receiving the …

Election to select a winner following a primary or a general election in which no candidate in the contest received the required minimum percentage of the votes cast. The two candidates receiving the …

The election to select a winner in a primary, in which if no candidate in the contest received the required minimum percentage of the votes cast the two candidates receiving the most votes for the con…

Tallies of votes cast in a run-off election after the polls have been closed for voting.

“A representative, known as a ‘runner,’ of each of the parties shall be allowed to come to the table at frequent intervals for the purpose of taking whatever list or memoranda the CHECKERS may wish to…

A person running together with another person on two closely associated political offices in an election. For example, President and Vice President, and (in some states) Governor and Lieutenant Govern…

Person contending in a contest for office. A candidate may be explicitly presented as one of the choices on the ballot or may be a write-in candidate.

Election to select a winner following a primary, or sometimes a general election, in which no candidate in the contest received the required minimum percentage of the votes cast. The two candidates re…

A subsequent PRIMARY ELECTION held if the winner of the first primary does not win a statutory percentage of the vote. Texas Code §41.007. In Arkansas, a GENERAL PRIMARY. See also FIRST PRIMARY, SECON…

A mail delivery route in a rural area where mail is typically delivered to a box number for destinations without street addresses, as opposed to a P. O. Box.