Category Overview

Standards — Election Security Glossary

279 election security terms in the Standards category, with definitions sourced from NIST, CISA, EAC, and 30+ authoritative documents.

Browse all 279 terms in Standards

Common Data Format

Standard and practice of storing and creating data in a common, described format that can be read by other systems.

Medium consensus4 sources

Configuration Management

The "discipline applying technical and administrative direction and surveillance to identify and document functional and physical characteristics of a configuration item, control…

Medium consensus4 sources

Configuration Item

An aggregation of information system components that is designated for configuration management and treated as a single entity in the configuration management process.

Medium consensus3 sources

Configuration Management Plan

A "document detailing the process for identifying, controlling and managing various released items (such as code, hardware and documentation)" GLOSSARY.

High consensus3 sources

Conformance

"Fulfillment of specified requirements by a product, process or service." 2005 VVSG GLOSSARY.

Medium consensus3 sources

Commercial Comsec Evaluation Program (ccep)

Relationship between National Security Agency (NSA) and industry, in which NSA provides the COMSEC expertise (i.e., standards, algorithms, evaluations, and guidance) and industry…

Medium consensus2 sources

Common Criteria

Governing document that provides a comprehensive, rigorous method for specifying security function and assurance requirements for products and systems.

Medium consensus2 sources

Common Industry Format

A "format described in ISO/IEC 25062:2006, 'Common Industry Format (CIF) for Usability Test Reports'." VVSG.

Medium consensus2 sources

Comprehensive Testing

A test methodology that assumes explicit and substantial knowledge of the internal structure and implementation detail of the assessment object.

Medium consensus2 sources

Configuration Identification

An element of configuration management, consisting of selecting the configuration items for a system and recording their functional and physical characteristics in technical…

Medium consensus2 sources

Configuration Status Accounting

An "element of configuration management, consisting of the recording and reporting of information needed to manage a configuration effectively.

High consensus2 sources

Controlled Unclassified Information (cui)

Information that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and government-wide policies, excluding information Classified…

Low consensus2 sources

By ESG Editorial Team · Drawing on NIST, IEEE, the EAC, and 25+ sources on election standards and best practices

Standards are the technical and procedural benchmarks that election systems and practices are measured against. They include the federal Voluntary Voting System Guidelines (VVSG), state-level certification criteria, professional and industry best practices, and the consensus documents published by standards organizations like NIST and IEEE.

Why this category matters for election security is that standards give the field a shared reference point. Without them, every jurisdiction would have to invent its own criteria, and there would be no way to compare systems, procedures, or outcomes across jurisdictions. With them, an election official in one county can look at a standard and know what is expected, and a federal agency can audit a state against a known baseline.

Standards are not law. They are voluntary until adopted. The VVSG, for example, only becomes binding when incorporated by reference into a state's certification process or a federal procurement rule. But the voluntary nature of standards is misleading. In practice, adherence to recognized standards is often treated as evidence of due diligence, and departures from them invite scrutiny.

The terminology in this category covers both the standards themselves and the bodies that create them. The concepts here describe a layered system: international standards, federal expectations, state requirements, and local procedures, all building on each other.

How These Terms Relate

These concepts together describe the standards ecosystem that supports election administration. The terminology covers both the standards themselves (VVSG, the NIST Cybersecurity Framework, IEEE standards) and the bodies that create them. The unifying theme is that standards provide a shared reference point: a way for a county, a state, and a federal agency to speak a common language about what good election security looks like.

Related categories

Can't find the right category?

Search the full glossary, or browse every term alphabetically instead.