Supply Chain — Election Security Glossary
13 election security terms in the Supply Chain category, with definitions sourced from NIST, CISA, EAC, and 30+ authoritative documents.
Browse all 13 terms in Supply Chain
Supply Chain
A system of organizations, people, activities, information, and resources, possibly international in scope, that provides products or services to consumers.
Cots
commercial-off-the-shelf.
Supply Chain Risk Management
A systematic process for managing supply chain risk by identifying susceptibilities, vulnerabilities, and threats throughout the supply chain and developing mitigation strategies…
Authorized Vendor
Manufacturer of information security (INFOSEC) equipment authorized to produce quantities in excess of contractual requirements for direct sale to eligible buyers.
Commodity Service
An information system service (e.g., telecommunications service) provided by a commercial service provider typically to a large and diverse set of consumers.
External Information System Service Provider
A provider of external information system services to an organization through a variety of consumer-producer relationships, including but not limited to: joint ventures; business…
Final Goods Assembler
The entity that is most responsible for the placement of a product or service into the stream of commerce.
Ict Supply Chain Threat
A man-made threat achieved through exploitation of the information and communications technology (ICT) system's supply chain, including acquisition processes.
Supply Chain Attack
Attacks that allow the adversary to utilize implants or other vulnerabilities inserted prior to installation in order to infiltrate data, or manipulate information technology…
Supply Chain Compromise
An occurrence within the supply chain whereby an adversary jeopardizes the confidentiality, integrity, or availability of a system or the information that the system processes,…
Supply Chain Management
A cross-functional approach to procuring, producing, and delivering products and services to customers.
Trusted Foundry
Facility that produces integrated circuits with a higher level of integrity assurance.
By ESG Editorial Team · Drawing on NIST, CISA, EAC, and 25+ sources on election supply chain risk management
Election supply chain is the network of vendors, components, and integrity controls that election equipment and software depends on. It includes the manufacturers of voting machines, the firms that develop election management software, the laboratories that test equipment, the vendors that supply ballot printing and design services, and the chain of custody that moves equipment from manufacturer to polling place.
Why this category matters for election security is that an election system is only as trustworthy as the weakest link in the supply chain that produces it. A compromise introduced at the manufacturing stage, a backdoor inserted in firmware before delivery, or a tampered software update can all become embedded in the equipment used on election day. Defending against these risks requires a layered approach that combines vendor vetting, supply chain transparency, integrity testing, and post-delivery verification.
Federal guidance from CISA and the EAC addresses supply chain risk in election contexts. The recent vulnerability disclosures and supply chain incidents in the broader technology sector have prompted election offices to apply more rigorous supply chain risk management practices. The terminology here covers both the threats and the controls.
The terminology in this category covers both the supply chain itself and the discipline of managing its risks. The concepts here are practical. They describe the work of ensuring that the components elections depend on are trustworthy.
How These Terms Relate
These concepts together describe the supply chain risk landscape that election infrastructure faces. The terminology here draws on the broader supply chain security literature, but applied to the election context. The unifying theme is trust propagation. An election system can only be trusted if every component in its supply chain is itself trustworthy. The election-specific challenge is that supply chains are long, complex, and often international, making rigorous supply chain risk management a real operational discipline.
Related categories
Can't find the right category?
Search the full glossary, or browse every term alphabetically instead.