Category Overview

Standards — Election Security Glossary

279 election security terms in the Standards category, with definitions sourced from NIST, CISA, EAC, and 30+ authoritative documents.

Browse all 279 terms in Standards

Commercial Comsec Evaluation Program (ccep)

Relationship between National Security Agency (NSA) and industry, in which NSA provides the COMSEC expertise (i.e., standards, algorithms, evaluations, and guidance) and industry…

Medium consensus2 sources

Common Criteria

Governing document that provides a comprehensive, rigorous method for specifying security function and assurance requirements for products and systems.

Medium consensus2 sources

Common Industry Format

A "format described in ISO/IEC 25062:2006, 'Common Industry Format (CIF) for Usability Test Reports'." VVSG.

Medium consensus2 sources

Comprehensive Testing

A test methodology that assumes explicit and substantial knowledge of the internal structure and implementation detail of the assessment object.

Medium consensus2 sources

Configuration Identification

An element of configuration management, consisting of selecting the configuration items for a system and recording their functional and physical characteristics in technical…

Medium consensus2 sources

Configuration Status Accounting

An "element of configuration management, consisting of the recording and reporting of information needed to manage a configuration effectively.

High consensus2 sources

Controlled Unclassified Information (cui)

Information that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and government-wide policies, excluding information Classified…

Low consensus2 sources

Coverage

An attribute associated with an assessment method that addresses the scope or breadth of the assessment objects included in the assessment (e.g., types of objects to be assessed…

Medium consensus2 sources

Criticality Level

Refers to the (consequences of) incorrect behavior of a system.

Medium consensus2 sources

Cryptographic System Survey

Management technique in which actual holders of a cryptographic system express opinions on the system's suitability and provide usage information for technical evaluations.

Medium consensus2 sources

Data Element

A basic unit of information that has a unique meaning and subcategories (data items) of distinct value.

Medium consensus2 sources

Depth

An attribute associated with an assessment method that addresses the rigor and level of detail associated with the application of the method.

Medium consensus2 sources

By ESG Editorial Team · Drawing on NIST, IEEE, the EAC, and 25+ sources on election standards and best practices

Standards are the technical and procedural benchmarks that election systems and practices are measured against. They include the federal Voluntary Voting System Guidelines (VVSG), state-level certification criteria, professional and industry best practices, and the consensus documents published by standards organizations like NIST and IEEE.

Why this category matters for election security is that standards give the field a shared reference point. Without them, every jurisdiction would have to invent its own criteria, and there would be no way to compare systems, procedures, or outcomes across jurisdictions. With them, an election official in one county can look at a standard and know what is expected, and a federal agency can audit a state against a known baseline.

Standards are not law. They are voluntary until adopted. The VVSG, for example, only becomes binding when incorporated by reference into a state's certification process or a federal procurement rule. But the voluntary nature of standards is misleading. In practice, adherence to recognized standards is often treated as evidence of due diligence, and departures from them invite scrutiny.

The terminology in this category covers both the standards themselves and the bodies that create them. The concepts here describe a layered system: international standards, federal expectations, state requirements, and local procedures, all building on each other.

How These Terms Relate

These concepts together describe the standards ecosystem that supports election administration. The terminology covers both the standards themselves (VVSG, the NIST Cybersecurity Framework, IEEE standards) and the bodies that create them. The unifying theme is that standards provide a shared reference point: a way for a county, a state, and a federal agency to speak a common language about what good election security looks like.

Related categories

Can't find the right category?

Search the full glossary, or browse every term alphabetically instead.