C Terms — Election Security Glossary

Certification and accreditation.

RECORDS from MOBILE BALLOT BOX PC Cards and produce final election results. See also RALLY.

Data or information in its encrypted form.

See Counter with Cipher-Block Chaining-Message Authentication Code

Chief Information Officer.

Refers to everything in a web application that is displayed or takes place on the client (end user device)

Communications PACK

Refers to the methods used to bypass or spoof biometric security systems

In the NICE Framework, cybersecurity work where a person: Addresses problems, installs, configures, troubleshoots, and provides maintenance and training in response to customer requirements or inquiri…

Computer Security Resource Center

See Common Vulnerabilities and Exposures. (NISTIR)

The interconnected information infrastructure of interactions among persons, processes, data, and information and communications technologies, along with the environment and conditions that influence …

The means to accomplish a mission, function, or objective.

The secure transporter for a Hart InterCivic eSlate VOTING BOOTH.

Set of operations which establish, under specified conditions, the relationship between values indicated by a measuring instrument or measuring system, or values represented by a material measure, and…

The State of California’s chief elections officer who oversees all aspects related to elections within California.

(opscan) The thickness of a ballot measured in thousandths of an inch.

“[A]s used in relation to special elections or special primaries, means the affirmative action taken by the responsible public officer to cause a special election or special primary to be held.” Ga. C…

Procedure for identifying and authenticating a remote information system terminal, whereby the host system disconnects the terminal and reestablishes contact.

When an authorized government authority proclaims that an election will take place at a particular time.

Function, method, operation, subroutine, procedure, or analogous structural unit that appears within a module.

In Vermont, an election worker who has a specialized role in a RECOUNT. “The caller shall call the name of the person voted for and/or BLANK BALLOTS, and/or SPOILED BALLOTS.” Vermont Stat. 2602f(a). S…

A series of democratic activities to influence a political vote for or against candidates or ballot questions.

Anything of value given, loaned or advanced to influence a political vote for or against candidates or ballot questions.

The act of reporting campaign contributions.

Report that details political expenses required to be filed by a governing authority.

The act of raising and spending funds for political purposes.

Reports that detail political contributions and expenses required to be filed by a governing authority.

A set of laws that detail the rules and regulations for raising and spending funds and contributions for political purposes.

Reports that detail political contributions and expenses required to be filed by a governing authority.

A set of requirements that detail the rules and regulations for raising and spending funds and contributions for political purposes.

The documents, resources and other materials used to influence a political vote for or against candidates or ballot questions. Campaign materials may include t-shirts, buttons, bumper stickers, yard s…

A sign advertising a particular vote.

In Massachusetts, every physical BALLOT that is counted must be marked as cancelled. “Ballot boxes shall … contain mechanical devices for receiving, registering and cancelling every ballot deposited t…

Written messages to voters informing them they have been removed from voter registration lists.

The act of removing a voter from a voter registration list.

A term used by election officials when a voter's record shows that the voter has been removed from the voting rolls.

The state of being a candidate.

A person who is seeking nomination or election to a specified office and who either has met the legal requirements to have his/her name printed on the ballot or is eligible to have his/her name writte…

The “area(s) on or between lines separati ng candidate names.” Ark. Register §108.00.02- 003.300(a). Cf. ISSUE AREA.

A group of individuals organized for political purposes to support or oppose candidates for public office.

The counter which numerically registers the votes cast for a candidate. Ga. Code Ann. §21-2- 310(1). Likewise in Massachusetts. See also QUESTION COUNTER.

The official procedures to propose an individual to be considered for public office.

A contest option that is associated with a candidate.

OVAL, the elliptical area on an optical scan ballot in which a voter marks a choice.

A formal written document signed by registered voters to request the names of candidates be placed on election ballots.

Record that reflects the total votes cast for the candidate. This record is augmented as each ballot is cast on a DRE or as digital signals from the conversion of voted paper ballots are logically int…

The act of completing the required paperwork to become a certified candidate for public office.

A formal list of candidates.

A written summary of information about a candidate for public office for the purposes of influencing voters.

When a person announces a candidacy or files for an election but later decides—by their own choice— not to appear on the final ballot.

The time frame when an individual may remove their name from the list of candidates for public office.

A form of ballot in which an elector chooses between candidates rather than between parties and political groupings.

Official listing of all qualified candidates for a public office up for election.

A term associated with INSTANT RUNOFF VOTING, meaning “all candidates who have not been eliminated at a previous STAGE.” Wash. Rev. Code §29A.53.030.

(COMSEC) (C. F. D.) Type of physical protective packaging used to contain and dispense keying material in punched or printed tape form. Rationale: Although being phased out, canisters are still in cir…

(1) Aggregating or confirming every valid ballot cast and counted, which includes absentee, early voting, Election Day, provisional, challenged, and uniformed and overseas citizen. (2) Solicit votes.

A detailed report of activities and information about the canvass of an election.

Compiling the results from an election for the purpose of validating and officially certifying the results. Canvassing may include counting of ballots as well as review of the statements of the vote p…

A group of individuals working together, following specific rules and procedures, to compile, review and validate election materials.

The means to accomplish a mission, function, or objective. (Adapted from: DHS Risk Lexicon) (NICCS)

Number of parties, candidates, questions Total votes

Those policies that are developed by governing or coordinating institutions of Health Information Exchanges (HIEs). They provide overall requirements and guidance for protecting health information wit…

The method of taking a biometric sample from an end user. (FIPS 201) (NISTIR)

“Paper manufactured in accordance with certain specifications rendering it suitable for use in card reading equipment.” Cal. Regs. §20204

An individual possessing an issued Personal Identity Verification (PIV) card. (FIPS 201) (NISTIR)

To win an election.

The “permanent memory which stores the BALLOT DISPLAY information and records the votes for each Direct Recording Election Machine.” Wyo. Rules §1.4(p).

(Cross Domain) The downward flow of information through a range of security levels greater than the accreditation range of a system, network, or component without passing through an isolated device th…

The final action a voter takes in selecting contest options and irrevocably confirming their intent to vote as selected.

A ballot has been deposited by the voter in the ballot box, mailbox, drop box or electronically submitted for tabulation.

Permanent record of all votes produced by a single voter whether in electronic, paper or other form. Also referred to as ballot image when used to refer to electronic ballots.

The act of a voter to place their completed paper ballot in a ballot box, to confirm and record their choices on a touch screen voting device at a voting location, to place a completed ballot in the m…

• producing reports of vote totals. The record incorporates system status and error messages generated during election processing, including a log of machine activ ities and routine and unusual interv…

Total loss of function or functions, such as the loss or unrecoverable corruption of voting data or the failure of an on-board battery of volatile memory.

See security categorization.

(C. F. D.) Restrictive label applied to classified or unclassified information to limit access.

The fabrication of a false online identity by a cybercriminal for the purposes of deception, fraud, or exploitation

(1) A closed meeting of a group of persons belonging to the same political party or faction usually to select candidates or to decide on policy. (2) A group of people united to promote an agreed-upon …

A meeting at which local members of a political party register their preference among candidates running for office or select delegates to attend a convention.

Rules and regulations that determine the process for a meeting at which local members of a political party register their preference among candidates running for office or select delegates to attend a…

See Cipher Block Chaining-Message Authentication Code.

Cellphones equipped with cameras provide an easy vote-selling mechanism. The voter can dial a number and transmit video images of he r activities within the voting booth to a remote observer, who can …

A mechanism for wireless data transfer used in some voting systems for uploading precinct results for central tabulation. Abbreviated CDPD.

A central absentee precinct (CAP) is a precinct established in the courthouse or other public building in a county or city for the receiving, counting, and recording of absentee ballots cast in the co…

A “precinct established by a county or city … fo r the processing of absentee ballots for the county or city or any combination of precincts within the county or city.” Va. Code §24.2-101.

A “marksense ballot counter that reads and tabulat es marksense ballots at a central location to which ballots are transported after the polls close. There may be more than one central counter in a co…

The central ballot inspection board shall: 1. Receive the ballots in sealed containers. 2. Inspect the containers, record the number indicated on each container and its seal pursuant to [statute] and …

The organization of the central or executive committees of the political parties in a county, state, or other political subdivision.

An act of tabulating ballots from multiple precincts at a central location.

Optical scan system that utilizes one or more high-speed scanners at a central location to tabulate ballots. Central count systems are usually paired with Vote By Mail technologies. Central count syst…

The rules and regulations followed when tabulating ballots from multiple precincts at a central location.

A voting system that tabulates ballots from multiple precincts at a central location. Voted ballots are placed into secure storage at the polling place. Stored ballots are transported or transmitted t…

A facility where ballots and/or results from multiple polling places are tallied. In jurisdictions which do not use equipment that tallies votes at the polling places, the central counting center is t…

A site used to check in, process or tabulate ballots from multiple precincts as a central location.

A person who loads ballot definition files into a voting system. 2007 VVSG.

(or Tier 0) See Tier 0.

The entity that keeps records of accountable COMSEC material held by COMSEC accounts subject to its oversight.

Electronic voting device that consolidates and reports vote totals from multiple precincts at a central location.

The Key Management Infrastructure core node that provides central security management and data management services.

Central COUNT. Cf. PRECINCT TABULATION.

A central tabulator may be a high-speed optical scanner that is used to count large numbers of optical scan paper ballots. The term “central tabulator” is also used sometimes to describe a jurisdictio…

The “permanent, centralized electronic data base of voters” maintained by the Secretary of State in North Dakota. N. D. C. C. §16.1-02-01.

A list of voters maintained in a single, uniform, official, computerized statewide database of registered voters.

An “OPTICAL SCANNER used as a CENTRAL TABULATOR. … Most machines in this class are special purpose machines that use reflected light to identify marks at specific locations on the ballot. They are des…

A single, uniform, official, computerized statewide database of registered voters.

An official document attesting a certain fact.

The computer system or systems that process certification authority (CA) software and/or have access to the CA private keys, end entity keys, or end entity public keys prior to certification.

Process whereby certificates (as defined above) are generated, stored, protected, transferred, loaded, used, and destroyed.

(CMA) A Certification Authority (CA) or a Registration Authority (RA). (SP 800-32) (NISTIR)

1. A specialized form of administrative policy tuned to electronic transactions performed during certificate management. A certificate policy addresses all aspects associated with the generation, prod…

1. A list of revoked public key certificates created and digitally signed by a Certificate Authority.

(CSA) A trusted entity that provides on-line verification to a relying party of a subject certificate's trustworthiness, and may also provide additional attribute information for the subject certifica…

(CSS) An authority that provides status information about certificates on behalf of the CA through online transactions (e.g., an online certificate status protocol (OCSP) responder).

Document issued by NVLAP to a laboratory that has met the criteria and conditions for accreditation.

A “certification … stating that all voting and vote counting equipment has been examined by the appropriate elections official before its use in an election and has been found to be operating correctl…

A written statement confirmed by oath or affirmation by a person who gathered voter's signatures on a petition.

A written statement confirming that a candidate was elected to public office.

A written statement detailing an election error.

A written statement confirming that a candidate received one of the highest numbers of votes for public office, usually indicating they will be moving on to a general or run-off election.

A form completed by a licensed or certified health professional, or designated agency attesting to an individual’s disability.

An official, sworn statement by an elections office to attest that a citizen is a registered voter.

A certificate issued by a judicial system to restore voting rights.

The official document by which a state informs the Federal government of the name of its presidential electors. “As soon as possible after the presidential electors are chosen, the Governor shall send…

Information, such as subscriber’s postal address, that is not included in a certificate. May be used by a certification authority (CA) managing certificates.

Procedure by which a third party gives written assurance that a product, process, or service conforms to specified requirements.

The independent technical liaison for all stakeholders involved in the certification and accreditation (C&A) process responsible for objectively and independently evaluating a system as part of the ri…

An entity authorized to create, sign, issue, and revoke public key certificates.

The collection of equipment, personnel, procedures and structures that are used by a Certification Authority to perform certificate issuance and revocation. (SP 800-32) (NISTIR)

(C. F. D.) Commercial-off-the-shelf (COTS) workstation with a trusted operating system and special purpose application software that is used to issue certificates. Rationale: Term has been replaced by…

The certification envelope is used to ensure that the voter votes, and the ballot is counted, in the correct jurisdiction. Used as part of the double-envelope process.

Product of the certification effort documenting the detailed results of the certification activities. Rationale: The Risk Management Framework uses a new term to refer to this concept, and it is calle…

(CPS) A statement of the practices that a certification authority (CA) employs in issuing, suspending, revoking, and renewing certificates and providing access to them, in accordance with specific req…

The laws and regulations that govern the conditions that are essential elements to certify an elections or voting process.

A “a pre-audited group of ballots voted with a pr e-determined number of valid votes for each candidate, each write-in position and each voting position as a measure or proposition that appears on the…

Software and hardware security tests conducted during development of an information system component.

Testing performed under either national or state certification processes to verify voting system conformance to requirements.

A written statement attesting that the tabulation and canvassing of the election is complete and accurate.

A written statement attesting that the election results are a true and accurate accounting of all votes cast in a particular election.

A written statement attesting that the number of signatures on a petition counted as valid or rejected is a true and accurate accounting of the facts.

TEMPEST technical authority (CTTA) An experienced, technically qualified U. S. Government employee who has met established certification requirements in accordance with CNSS approved criteria and has …

Final vote tallies that have been attested as true and accurate by the official responsible for confirming their accuracy.

An experienced, technically qualified U. S. government employee who has met established certification requirements in accordance with CNSS-approved criteria and has been appointed by a U. S. governmen…

Declared Write-in

(C. F. D.) Individual responsible for making a technical judgment of the system’s compliance with stated requirements, identifying and assessing the risks associated with operating the system, coordin…

The act of a third party giving written assurance that a product, process or service conforms to specified requirements.

A local board of election that certifies a RETURN to be correct. 31 Ky. Admin. Regs. §2:010(18)(3). Similarly in Mich. Rules §168.771(1)(g).

A small piece of wastepaper produced by punching a hole in punched card or tape.

An old fraud in which a voter is handed a pre-ma rked ballot by a party worker. The voter then enters the polling place and receives a blank ballot, but deposits the marked ballot in the ballot box an…

A process used to track the movement and control of an asset through its lifecycle by documenting each person and organization who handles an asset, the date/time it was collected or transferred, and …

A process and record that shows who obtained the evidence; where and when the evidence was obtained; who secured the evidence; and who had control or possession of the evidence. The “sequencing” of th…

Direct or relayed connections from a higher accredited domain to a series of lower accredited domains without passing through an isolated device that implements the enforcement of all applicable appro…

In Hawaii, an ELECTION OFFICIAL who manages the POLLING PLACE.

Questioning the eligibility of a voter to cast a ballot, or to accept a ballot for counting.

A form of PROVISIONAL BALLOT in Maine, West Virginia and Wyoming essentially the same as an AFFIDAVIT BALLOT.

A list of all CHALLENGES to voters. A “form furnished election board officers to be used in making a record of all challenges.” Nev. Rev. Stat. §293.035.

A PRIMARY ELECTION in Connecticut that is held only if a defeated candidate at a nominating convention receives a certain minimum percenta ge of votes, in which case an election is required.

Prearranged procedure in which a subject requests authentication of another and the latter establishes validity with a correct reply.

An authentication protocol where the verifier sends the claimant a challenge (usually a random value or a nonce) that the claimant combines with a secret (often by hashing the challenge and a shared s…

Ballot voted by an individual whose eligibility to vote has been questioned by another (typically an election official). The ballot is held until the reason for the challenge is resolved.

A voter whose eligibility to cast a ballot has been questioned.

An individual or official who questions the eligibility of a voter to cast a ballot, or to accept a ballot for counting.

A document, part of the TECHNICAL DOCUMENTATION PACKAGE, listing any changes that have been made to a system from a previously certified version.

The act of a voter re-registering to vote with a different political preference or association.

The act of a voter re-registering to vote to update their residence or mailing address. Voters can also update their address at approved government agencies such as the Department of Motor Vehicles an…

The act of a voter re-registering to vote with a different political preference or association.

(KPC) A key management infrastructure (KMI) Communication Channel that provides 1) Information Integrity Service; 2) either Data Origin Authentication Service or Peer Entity Authentication Service, as…

A written document by a legislative authority, such as a City or County, that defines the laws and regulations of that body.

An amendment to a written document that has been adopted by a legislative authority, such as a City of County, that modifies its organizing charter.

An election to adopt a county or city charter. Usually a type of SPECIAL ELECTION.

A type of acceptable mark on a paper or mark-sense ballot. See also CROSS.

Cipher text generated by cryptographic logic to detect failures in cryptography.

The act of marking a vote on a ballot.

An ELECTION OFFICIAL in the District of Columbia who ve rifies that voters are authorized to vote at a particular POLLING PLACE.

A “voter response position on a CONSOLIDATED BALLOT where a voter who desires to participate in a partisan primary must indicat e major party affiliation.” Wash. Admin. Code §434-22-020(1).

A “representative of the republican party and a representative of the democratic party, bearing credentials signed by the proper ward or town committee chairperson, shall be allowed to sit for the pur…

A list of the voters entitled to vote at a POLLING PLACE. N. H. Rev. Stat. §658:12. The voters who actually present themselves for voting are marked off on the checklist.

A process for recovering from system failure by recording the state of the system periodically and then restoring from the last saved state and updating with subsequent transactions.

A value that (a) is computed by a function that is dependent on the contents of a data object and (b) is stored or transmitted together with the object, for detecting changes in the data.

A county official in large Nebraska counties, appointed by the ELECTION COMMISSIONER, but of a different political party. Nebraska Stat. §32-209.

The official responsible for overseeing elections in a jurisdiction.

Agency official responsible for: (1) providing advice and other assistance to the head of the executive agency and other senior management personnel of the agency to ensure that information systems ar…

See senior agency information security officer (SAISO).

The official responsible for the proper and orderly voting at a polling location or an election process.

The “person selected to be responsible for the security of ballot envelopes and voter ballots.” Wyo. Stat. §22-1-102(a)(viii).

The chairperson of a PRECINCT BOARD in Georgia. Ga. Code Ann. §21-2-90.

The official responsible for overseeing elections in a state.

Under HAVA, the “individual designated by the State under Section 10 of the National Voter Registration Act of 1993 (42 U. S. C. §1973gg-8) to be responsible for coordination of the State’s responsibi…

“Nothing … shall prevent a voter from bei ng accompanied by a child or children who are under the age of thirteen (13) years while the voter is within the voting booth area.” R. I. Gen’l. Laws §17-19-…

CHAD. Nevada Rev. Stat. §293.3677.

1. = CONTEST CHOICE. 2007 VVSG. 2. A term associated with INSTANT RUNOFF VOTING, meaning “an indication on a ballot of a voter's ranking of candidates for any single office according to the voter's pr…

Instant RUNOFF VOTING

Runoff voting, preference voting, single transferable vote.

The ability of a voter to change the font in which the BALLOT is displayed and the screen contrast on a DRE during a VOTING SESSION. A HUMAN FACTOR identified in the 2007 VVSG.

In Indiana, the area around a POLLING PLACE. Ind. Code §3-5-2-14. Cf. BALLOT CHUTE. Ciber One of the federally certified INDEPENDENT TESTING AUTHORITIES.

S ynonym(s): cryptographic algorithm

(CBC-MAC) A secret-key block-cipher algorithm used to encrypt data and to generate a Message Authentication Code (MAC) to provide assurance that the payload and the associated data are authentic. (SP …

Negotiated algorithm identifiers. Cipher suites are identified in human-readable form using a pneumonic code. (SP 800-52) (NISTIR)

Cryptographic logic that uses previous cipher text to generate a key stream.

Data in its encrypted form. See BLACK.

Data or information in its encrypted form.

Process of enciphering audio information, resulting in encrypted speech. (CNSSI-4009) (NISTIR)

The term most frequently used for electoral district in francophone countries. See Electoral district.

The act of attempting to gather signatures from voters for initiatives, referendums, or candidates.

The process of gathering signatures for initiatives, referendums or candidates.

A “continuous path of travel from the street or parking area to the polling place building, into and through the polling place building to the vo ting area, and includes both horizontal and vertical t…

A person who presents petitions to voters to gather signatures for initiatives, referendums, or candidates.

A written statement confirmed by oath or affirmation by a person who gathered voter's signatures on a petition.

A person who, by place of birth, nationality of one or both parents, or naturalization is granted full rights and responsibilities as a member of a nation or political community, including the right t…

The procedure by which citizens can propose a law directly to a governing body.

An incorporated local government body within a state.

A written document by a City that defines the laws and regulations of that body.

A city official who is responsible for election administration for a city.

An “election to choose a city officer.” 63 N. H. Rev. Stat. §652:8.

A regular election of candidates and measures within a city.

Any “proposed county charter, any proposed am endment to a county charter, any proposition for the issuance of funding or refunding bonds of the county, any other question or proposition submitted to …

A law passed by a city.

An election held other than a regularly scheduled primary or general election within a city.

A “ballot for use by a CIVILIAN ABSENTEE VOTER,” as opposed to a MILITARY SERVICE BALLOT. N. J. Stat. Ann. §19:57-2.

Any “qualified and registered voter of the St ate who wants to vote by absentee ballot,” as opposed to a MILITARY SERVICE VOTER. N. J. Stat. Ann. §19:57-2. The definition is incorrect in that it does …

Statement by a vendor declaring that a specific product conforms to a particular standard or set of standard profiles; for voting systems, NASED qualification or EAC certification provides independent…

A party whose identity is to be verified using an authentication protocol.

An “identified set of voting systems or voting devices sharing a specified characteristic or characteristics.” 2007 VVSG. See, e.g. INNOVATION CLASS.

See classified national security information.

(C. F. D.) Security incident that occurs whenever classified data is spilled either onto an unclassified information system or to an information system with a lower level of classification or differen…

Information that has been determined pursuant to Executive Order (E. O.) 13526 or any predecessor order to require protection against unauthorized disclosure and is marked to indicate its classified s…

List of words that have been pre-defined as being acceptable for transmission and may be used in conjunction with a dirty word list to avoid false positives (e.g., secret within secretary). See white …

A electronic process that removes duplicate ballots from a single voter prior to counting; used by some Internet voting systems as one of three phases of counting.

A method of sanitization that applies logical techniques to sanitize data in all user- addressable storage locations for protection against simple non-invasive data recover y techniques; typically app…

WHITE BOX Testing. Cf. BLACK BOX TESTING.

Intelligible data, the semantic content of which is available.

A formal security determination by an authorized adjudicative office that an individual is authorized access, on a need to know basis, to a specific level of classified information (TOP SECRET, SECRET…

Removal of data from an information system, its storage devices, and other peripheral devices with storage capacity, in such a way that the data may not be reconstructed using common system capabiliti…

“Each election district and precinct shall be co mposed of compact and contiguous territory and shall have clearly defined and clearly obser vable boundaries. A ‘clearly observable boundary’ shall inc…

An official responsible for administering an election or an election process.

An official responsible for overseeing absentee voting or a portion of the absentee voting process.

In West Virginia, the official who registers voters and administers local elections.

Court clerks often have statutory roles in electi ons. For example, in Alabama, the clerk of the circuit court administers ABSENTEE VOTING and is a member of the APPOINTING BOARD. Ala. Code §17-6-1. L…

Click fraud is a type of Internet fraud that primarily targets banner advertisements paid per click. Click fraudsters may operate manually or with the help of programs. These programs simulate banner …

Any person or organization that engages the services of a testing or calibration laboratory.

Enables customers to access primary services nodes (PRSNs) to obtain key management infrastructure (KMI) products and services and to generate, produce, and distribute traditional (symmetric) key prod…

Also known as Information Technology Management Reform Act. A statute that substantially revised the way that IT resources are managed and procured, including a requirement that each agency design and…

The onboard clock of an ELECTRONIC DEVICE shall not drift more than one minute within a 15- hour period of the clock is set. 2007 VVSG.

The last day that a citizen can register to vote or update their voter registration before an election.

A form of List PR in which electors are restricted to voting only for a party or political grouping, and cannot express a preference for any candidate within a party list. See also Open list and Free …

Primary election in which voters receive a ballot listing only those candidates running for office in the political party with which the voters are affiliated. In some states, non-partisan contests an…

Environment providing sufficient assurance that applications and equipment are protected against the introduction of malicious logic during an information system life cycle. Closed security is based u…

The storage of classified information in properly secured General Services Administration-approved security containers.

A model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be ra…

The “territory of the general election voting pl ace or precinct in which the political party club is formed …, whether a ward or township or a subdivision thereof.” S. C. Code §7-1-20(12).

A NICE Framework category consisting of specialty areas responsible for specialized denial and deception operations and collection of cybersecurity information that may be used to develop intelligence…

A nation in an ad hoc defense arrangement with the U. S.

N. Synonym for program or software. v. to create or modify software.

The act of reverse-engineering the malicious program to understand the code that implements the software behavior. For example, when looking at compiled programs, the process involves using a disassem…

Document containing plain text and code equivalents in a systematic arrangement, or a technique of machine encryption using a word substitution technique. (CNSSI-4009) (NISTIR)

A columns of rectangular marks on an optical scan ballot next to the TIMING TRACK.

(C. F. D.) Group of letters, numbers, or both in a code system used to represent a plain text word, phrase, or sentence.

Set of plain text words, numerals, phrases, or sentences for which code equivalents are assigned in a code system.

A set of rules outlining the norms, rules, and responsibilities or proper practices of an individual or organization.

A set of rules outlining the norms, rules, and responsibilities or proper practices of election officials.

Document containing plain text and code equivalents in a systematic arrangement, or a technique of machine encryption using a word substitution technique.

A ballot that has been marked as PROVISIONAL or CONTESTED. In DRE systems, coded ballots can be excluded from tabulation until they are determined to have been cast by eligible voters.

A “published, credible set of coding rules, conventions or standards … that enhance the workmanship, security, integrity, testability, and ma intainability of [software] applications.” “Coding convent…

The illegal exercise of influence on a voter. “Any employer who attempts by coercion, intimidation, threats to discharge or to lessen the remuneration of an employee, to influence his vote in any elec…

1. An entity charged with responsibility for physical, technical, personnel, and information security affecting that organization.

A backup facility that has the necessary electrical and physical components of a computer facility, but does not have the computer equipment in place. The site is ready to receive the necessary replac…

Procedure for initially keying crypto-equipment. (CNSSI-4009) (NISTIR)

National security information (including intelligence information) classified T op Secret, Secret, or Confidential that is not in the Sensitive Compartmented Information (SCI) or Special Access Progra…

A NICE Workforce Framework category consisting of specialty areas responsible for specialized denial and deception operations and collection of cybersecurity information that may be used to develop in…

In the NICE Framework, cybersecurity work where a person: Executes collection using appropriate strategies and within the priorities established through the collection management process.

Two or more distinct inputs produce the same output. Also see Hash Function. (SP 800-57 Part 1) (NISTIR)

The ability of a voter, during a VOTING SESSION, to change the color in which the BALLOT is displayed. A HUMAN FACTOR identified in the 2007 VVSG.

An online software utility used by the Colorado Secretary of State (SOS) and local election officials to conduct risk-limiting audits.

In an electronic voting system which utili zes a ballot card, “a space on a ballot card for punching the voter's vote arranged in a row r unning lengthwise on the ballot card.” 10 Ill. Comp. Stat. §5/…

A “BALLOT CARD with a separate card attached to it by perforation and which contains instructions and spaces for WRITE-INS.” Mich. Rules §168.771(1)(i).

A test for susceptibility of an ELECTRONIC DEVICE to power surges t ypical of interference from lightning. The wave consists of an adjust able open circuit test voltage ranging from 2 to 6 kV, with 1.…

Two or more precincts treated as a single precinct for a specific election.

The command authority is responsible for the appointment of user representatives for a department, agency, or organization and their key and granting of modern (electronic) key ordering privileges for…

The exercising of authority by a commander (including planning, coordinating, directing, and controlling) to accomplish a mission

COMSEC evaluation program (CCEP) Relationship between National Security Agency (NSA) and industry, in which NSA provides the COMSEC expertise (i.e., standards, algorithms, evaluations, and guidance) a…

Relationship between NSA and industry in which NSA provides the COMSEC expertise (i.e., standards, algorithms, evaluations, and guidance) and industry provides design, development, and production capa…

Software, firmware, device, or component that is used in the United States by many different people or organizations for many different applications other than certified voting systems and that is inc…

Hardware and software components that are widely available for purchase and can be integrated into special-purpose systems. E-pollbooks are often implemented on COTS tablets such as the iPad or Androi…

The combination of multiple commercial-off-the-shelf (COTS) information assurance (IA) products in a layered configuration that satisfies the security requirements of an operational use case, when pro…

(CSfC) A commercial off-the-shelf (COTS) end-to-end strategy and process in which two or more COTS products can be combined into a solution to protect classified information.

The “COMMISSIONER OF REGISTRATION in counties.” N. J. S. §19:1-1.

The local election official who supervises a precinct in Louisiana. La. R. S. §18:425. Cf. ELECTION COMMISSIONER. Commissioner of Elections Usually the chief operation officer directly ad ministering …

A unified set of changes to Source Code, usually adding one feature, fixing one bug, or any other incremental, well encapsulated piece of work. A Version Control System usually has tools around author…

U. S. government’s interagency committee authorized to review certain transactions involving foreign investment in the United States and certain real estate transactions, in order to determine the eff…

Malware that is widely available for purchase, or free download, which is not customised and is used by a wide range of different threat actors.

An information system service (e.g., telecommunications service) provided by a commercial service provider typically to a large and diverse set of consumers. The organization acquiring and/or receivin…

Standard identification/smart card issued by the Department of Defense (DoD) that has an embedded integrated chip storing public key infrastructure (PKI) certificates.

In a telecommunications context, a telecommunications company that holds itself o ut to the public for hire to provide communications transmission services.

A nomenclature and dictionary of software security configurations.

A set of measures of the severity of software security configuration issues. (NISTIR 7502) (NISTIR)

A security control that is inherited by one or more organizational information systems. See security control inheritance.

An organizational official responsible for the development, implementation, assessment, and monitoring of common controls (i.e., security controls inherited by information systems).

Governing document that provides a comprehensive, rigorous method f or specifying security function and assurance requirements for products and systems.

Standard and practice of storing and creating data in a common, described format that can be read by other systems.

Any one of a family of devices developed to read-in, transfer, or store key.

Refers to the format described in ANSI/INCITS 354-2001 "Common Industry Format (CIF) for Usability Test Reports."

(CMSS) A set of measures of the severity of software feature misuse vulnerabilities. A software feature is a functional capability provided by software. A software feature misuse vulnerability is a vu…

(CPE) A nomenclature and dictionary of hardware, operating systems, and applications.

(CSP) A federal organization that provides National Security System-Public Key Infrastructure (NSS-PKI) support to other federal organizations, academia and industrial partners requiring classified NS…

User application software developed to run on top of the local COMSEC management software (LCMS) on the local management device/key processor (LMD/KP).

A nomenclature and dictionary of security-related software flaws.

(CVSS) A system for measuring the relative severity of software flaw vulnerabilities.

(CWE) A taxonomy for identifying the common sources of software flaws (e.g., buffer overflows, failure to check input data).

A register of electors for which the qualification for registration is a determinable criterion such as, religion, ethnicity, language or gender. All electors who meet the criterion may be entered in …

See cover (TRANSEC).

(C. F. D.) Deliberate transmission, retransmission, or alteration of communications to mislead an adversary's interpretation of the communications. Rationale: Partner terms (imitative communications d…

A “device containing a printer and a modem used to print results at a polling place and transmit the results to the Central Counting Site.” 2004 Pasco ESP 6. Sometimes COMM PACK.

Analytic model of communications associated with an organization or activity. The model is prepared from a systematic examination of communications content and patterns, the functions they reflect, an…

(COMSEC) A component of Information Assurance that deals with measures and controls taken to deny unauthorized persons information derived from telecommunications and to ensure the authenticity of suc…

Probability that a particular vulnerability will be exploited within an interacting population and adversely impact some members of that population.

A valid vocational designation for a candidate in California under certain circumstances. Cal. Elec. Code §13107.5(a).

A collaborative group of users who exchange information in pursuit of their shared goals, interests, missions, or business processes, and who therefore must have a shared vocabulary for the informatio…

A method to conduct a risk-limiting audit where individual ballots are randomly selected and compared to the voting system’s cast vote record (CVR) for each ballot

A nonhierarchical grouping of information used to control access to data more finely than with hierarchical security classification alone.

Mode of operation wherein each user with direct or indirect access to a system, its peripherals, remote terminals, or remote hosts has all of the following:

The security controls employed in lieu of the recommended controls in the security control baselines described in NIST Special Publication 800-53 and CNSS Instruction 1253 that provide equivalent or c…

The management, operational, and technical controls (i.e., safeguards or countermeasures) employed by an organization in lieu of the recommended controls in the low, moderate, or high baselines descri…

The List PR seats in a Mixed Member Proportional system which are awarded to parties or groupings to correct disproportionality in their representation in the results of elections held under the first…

An order issued by a court determining whether a person has the mentally capacity to vote.

Any cognizant security authority or person designated by the cognizant security authority.

A person who files a COMPLAINT in accordance with a state’s ADMINISTRATIVE COMPLAINT PROCEDURE. Cf. RESPONDENT.

An allegation by a voter under HAVA that a jurisdiction has violated the voting system standards mandated at 42 U. S. C. §15481. the filing of a complaint initiates the ADMINISTRATIVE COMPLAINT PROCED…

In violation of Title III of the Help America Vote Act of 2002, 42 U. S. C. §15481.” 31 Ky. Admin. Regs. 6:010. See ADMINISTRATIVE COMPLAINT PROCEDURE, COMPLAINANT.

The “time taken from when the voter performs some detectible action to when the voting system completes its response and settles into a st able state (e.g., finishes ‘painting’ the screen with a new p…

The property of a voting system by which every elig ible voter is accounted for as either having voted or not voted.

Audits that evaluate the compliance with laws, procedures, or standards. E.g. evaluating the security of ballot storage or the conduct of officials on election day.

Identified, testable requirement.

Element within a larger system; a component can be hardware or software. For hardware, it is a physical part of a subsystem that can be used to compose larger systems (e.g., circuit boards, internal m…

Two or more commercial Information Assurance (IA) products layered together to address the security requirements of an operational use case according to Natio nal Security Agency (NSA) guidance. A com…

A “document signed by the members of the State Board of Elections showing the total number of votes for each candidate and ballot proposal and the number of votes in each county. A composite abstract …

A US Government-wide initiative to establish a front line of cyber defense, demonstrate the resolve to secure US cyberspace and set the conditions necessary for long-term success, shape the future env…

A test methodology that assumes explicit and substantial knowledge of the internal structure and implementation detail of the assessment object. Also known as white box testing.

A violation of the security policy of a system such that an unauthorized disclosure, modification, or destruction of sensitive information has occurred.

Indicates that a victim system has installed malware, connected to a malicious Internet Protocol address, or provided a cyber actor unauthorized access to collect data or execute commands.

The set of Key Material Identification Numbers (KMIDs) of all keys in a universal that have been reported compromised. Cryptographic devices will not establish a secure connection with equipment whose…

Unintentional signals that, if intercepted and analyzed, would disclose the information transmitted, received, handled, or otherwise processed by telecommunications or information systems equipment.

The actions taken to defend against unauthorized activity within computer networks.

The term “means, but is not limited to, an electr onic device that performs logical, arithmetic or memory functions by the manipulations of electronic or magnetic impulses and includes all input, outp…

Intentional or reckless misuse, alteration, disruption, or destruction of information processing resources.

The “paper ballot prepared by the office of the secretary of state for use in conjunction with the optical scan precinct count system.” R. I. Genl. Laws §17-19-1(1). Computer Election Systems A voting…

Use of a crypto-algorithm program by a computer to authenticate or encrypt/decrypt information.

Computer Election Systems

A group of individuals, usually consisting of security analysts, organized to develop, rec- ommend, and coordinate immediate mitigation actions for containment, eradication, and recovery resulting fro…

See digital forensics.

Group of individuals usually consisting of security analysts organized to develop, recommend, and coordinate immediate mitigation actions for containment, eradication, and recovery resulting from comp…

Vote center election worker who checks the voter’s ID and signature, and processes the voter in the electronic poll book.

The term “means, but is not limited to, in terconnection of communication lines, including microwave or other means of electronic communication, with a computer through remote terminals or a complex c…

Actions taken through the use of computer networks to disrupt, deny, degrade, or destroy information resident in computers and computer networks, or the computers and networks themselves.

Actions taken to defend against unauthorized activity within computer networks. CND includes monitoring, detection, analysis (such as trend and pattern analysis), and response and restoration activiti…

In the NICE Framework, cybersecurity work where a person: Uses defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur …

In the NICE Framework, cybersecurity work where a person: Tests, implements, deploys, maintains, reviews, and administers the infrastructure hardware and software that are required to effectively mana…

Enabling operations and intelligence collection capabilities conducted through the use of computer networks to gather data from target or adversary information systems or networks.

(CNO) Comprised of computer network attack, computer network defense, and related computer network exploitation enabling operations.

The term “means, but is not limited to, a series of instructions or statements, in a form acceptable to a computer, that permits the f unctioning of a computer system in a manner designed to provide a…

“1. The county clerk shall appoint the members of the computer program and processing accuracy board no later than 7 days before the election in which they will serve. 2. The board shall verify that: …

Typically in readonly memory (ROM) or programmable read-only memory (PROM) - such that the programs and data cannot be dynamically written or modified during execution of the programs. (CNSSI-4009) (N…

Measures and controls that ensure confidentiality, integrity, and availability of the information processed and stored by a computer. Rationale: Term has been replaced by the term “cybersecurity”.

(C. F. D.) See incident.

A capability set up for the purpose of assisting in responding to computer security-related incidents; also called a Computer Incident Response Team (CIRT) or a CIRC (Computer Incident Response Center…

(C. F. D.) A resource, tool, or mechanism used to maintain a condition of security in a computerized environment. These objects are defined in terms of attributes they possess, operations they perform…

A collection of computer security object (CSO) names and definitions kept by a registration authority.

(C. F. D.) Hardware/software designed to provide computer security features in a larger system environment.

See Virus.

A “county which utilizes a computerized voter registration system which has been approved by the coordinator of elections.” Tenn. Code §2-1-104(5).

The database required to be maintained by each state comprising a “centralized, interactive computerized statewide voter registration list defined, maintained, and administered at the State level that…

A generic term used to describe any telephone system that uses centralized stored program computer technology to provide switched telephone networking features and services. CTSs are referred to comme…

Center may be connected with a LAN.

Workstation or server (host) and its operating system, peripherals, and applications.

Incident Monitoring Activity (CIMA) The office within a department or agency maintaining a record of COMSEC incidents caused by elements of that department or agency, and ensuring all actions required…

An administrative entity identified by an account number, used to maintain accountability, custody and control of COMSEC material.

Examination of the holdings, records, and procedures of a COMSEC account ensuring all accountable COMSEC material is properly handled and safeguarded. (CNSSI-4009) (NISTIR)

COMSEC material that assists in securing telecommunications and is required in the production, operation, or maintenance of COMSEC systems and their components. COMSEC keying material, callsign/freque…

All COMSEC material other than equipment or devices, which assist in securing telecommunications and is required in the production, operation, and maintenance of COMSEC systems and their components. S…

Group of parts, elements, subassemblies, or circuits that are removable items of COMSEC equipment. (CNSSI-4009) (NISTIR)

Definable perimeter encompassing all hardware, firmware, and software components performing critical COMSEC functions, such as key generation, handling, and storage. (CNSSI-4009) (NISTIR)

Collection of NSA-approved microchips. (CNSSI-4009) (NISTIR)

Computer instructions or routines controlling or affecting the externally performed functions of key generation, key distribution, message encryption/decryption, or authentication. (CNSSI-4009) (NISTI…

Individual designated by proper authority to be responsible for the receipt, transfer, accounting, safeguarding, and destruction of COMSEC material assigned to a COMSEC account. (CNSSI-4009) (NISTIR)

Process of preparing COMSEC equipment for disposal by extracting all CCI, classified, or cryptographic (CRYPTO) marked components for their secure destruction, as well as defacing and disposing of the…

Removable item of COMSEC equipment, assembly, or subassembly; normally consisting of a single piece or group of replaceable parts. (CNSSI-4009) (NISTIR)

A tactical operational situation, as perceived by the responsible person/officer in charge, in which the alternative to strict compliance with procedural restrictions affecting use of a COMSEC equipme…

Equipment or combination of components ready for use in a COMSEC application.

Equipment designed to provide security to telecommunications by converting information to a form unintelligible to an unauthorized interceptor and, subsequently, by reconverting such information to it…

The space used for generating, storing, repairing, or using COMSEC material. The COMSEC material may be in either physical or electronic form. Unless otherwise noted, the term "COMSEC facility" refers…

Any occurrence that potentially jeopardizes the security of COMSEC material or the secure transmission of national security information. COMSEC Incident includes Cryptographic Incident, Personnel Inci…

A COMSEC incident that has been investigated, evaluated, and determined to jeopardize the security of COMSEC material or the secure transmission of information. Rationale: The more accurate and used t…

Individual who manages the COMSEC resources of an organization. (CNSSI-4009) (NISTIR)

Item(s) designed to secure or authenticate telecommunications. COMSEC material includes, but is not limited to key, equipment, modules, devices, documents, hardware, firmware, or software that embodie…

Logistics and accounting system through which COMSEC material marked "CRYPTO" is distributed, controlled, and safeguarded. Included are the COMSEC central offices of record, crypto logistic depots, an…

See Information Systems Security Equipment Modification. (CNSSI-4009) (NISTIR)

Removable component that performs COMSEC functions in a telecommunications equipment or system. (CNSSI-4009) (NISTIR)

The act of listening to, copying, or recording transmissions of one's own official telecommunications to provide material for analysis in order to determine the degree of security being provided to th…

Statement of COMSEC measures and materials used to protect a given operation, system, or organization. (CNSSI-4009) (NISTIR)

Includes all types of COMSEC material, except key, in electronic or physical form. this includes all classifications of unencrypted software, and all associated data used to design, create, program, o…

Organized collection of COMSEC and communications information relative to a given operation, system, or organization. (CNSSI-4009) (NISTIR)

Information required by a COMSEC equipment or system to enable it to properly handle and control key. (CNSSI-4009) (NISTIR)

Teaching of skills relating to COMSEC accounting and the use of COMSEC aids.

Separation of electrical and electronic circuits, components, equipment, and systems that handle national security information (RED), in electrical form, from those that handle non-national security i…

See security concept of operations.

In general, an oral concession by a candidate that he has lost an election has no legal effect.

Essentially distinct elections, e.g., involvi ng different political subdivisions, held for convenience at the same time and place. “municipa l primary and general elections are held at the same time,…

Some states use this term to define the action of an individual registering and casting a provisional ballot after the statutory deadline, but whose eligibility or registration status could not be con…

The act of managing, running, and overseeing an election.

(1) Prevention of unauthorized disclosure of information. (2) Preserving authorized restrictions on information access and disclosure, including means for protecting personal privacy and proprietary i…

Process of controlling modifications to hardware, firmware, software, and documentation to protect the information system against improper modifications prior to, during, and after system implementati…

(CCB) Establishment of and charter for a group of qualified people with responsibility for the process of controlling and approving changes throughout the development and operational lifecycle of prod…

“NON-EXECUTABLE input to software, firmware, or HARDWIRED LOGIC, not including VOTE DATA.” 2007 VVSG

Element of configuration management, consisting of selecting the configuration items for a system and recording their functional and physical characteristics in technical documentation.

Aggregation of hardware, software, or both that is designated for configuration management and treated as a single entity in the configuration management process.

See VOTING SYSTEM CONFIGURATION LOG.

Discipline applying technical and administrative direction and surveillance to identify and document functional and physical characteristics of a configuration item, control changes to these character…

Document detailing the process for identifying, controlling and managing various released items (such as code, hardware and documentation).

The set of parameters that can be changed in hardware, software, or firmware that affect the security posture and/or functionality of the information system.

An element of configuration management, consisting of the recording and reporting of information needed to manage a configuration effectively. This includes a listing of the approved configuration ide…

See Covert Channel. (CNSSI-4009) (NISTIR)

A notice mailed to a voter to confirm changes made to their information on a voter list. The notice may request that the voter take an action to confirm that the information contained in the notice is…

A notice mailed to a voter to confirm changes made to their information on a voter list. The notice may request that the voter take an action to confirm that the information contained in the notice is…

Fulfilling specified requirements by a product, process, or service.

Process of testing an implementation against the requirements specified in one or more standards. The outcomes of a conformance test are generally a pass or fail result, possibly including reports of …

Fulfillment by a product, process or service of specified requirements.

Demonstration that specified requirements relating to a product, process, system, person or body are fulfilled. See also testing, inspection, certification, accreditation, conformity assessment bodies…

Body that performs conformity assessment services. NOTE An accreditation body is not a conformity assessment body.

The area within the boundaries of a state which a member of the U. S. House of Representatives is elected.

An election when voters participate to election their U. S. House of Representative.

On certain ballots, voters are instructed to draw a single line to connect the head and tail of the arrow that points to the choice to vote for a candidate or measure, instead of filling in a bubble o…

General agreement, characterized by the absence of sustained opposition to substantial issues by any important part of the concerned interests and by a process that involves seeking to take into accou…

See security banner (also known as notice and consent banners)

The effect of an event, incident, or occurrence.

A “listing of the computer responses to program instructions and of instructions to the computer by the operator.” 31 Ky. Admin. Regs. §2:010(1)(10).

A “single ballot on which the candidates for each political party are separate from the candidates for any other political party and which also includes non-partisan offices and issues, listed after t…

An election where more than one jurisdiction is holding an election on the same day, and participating jurisdictions take an official action to combine elections on the same ballot.

Two or more precincts treated as a single precinct for a specific election.

An election where more than one jurisdiction is holding an election on the same day, one of which is a scheduled primary election, and participating jurisdictions take an official action to combine el…

A crime defined in HAVA. “Any individual who knowingly and willfully gives false information in registering or voting in violati on of section 11(c) of the National Voting Rights Act of 1965 (42 U. S.…

An elected peace officer in Pennsylvania, em ployed by the judicial branch, who maintains order at a polling place and ensures that voters may cast their votes without intimidation. Constitutional off…

A synonym for electoral district used predominantly in some Anglophone countries. See Electoral district.

A person who is represented politically by a designated government official or officeholder, especially when the official is one that the person represented has the opportunity to participate in selec…

The basic principles and laws of a nation, state, or social group that determine the powers and duties of the government and guarantee certain rights to the people in it.

Used in request and response messages. ElectionAdministration optionally includes this class to specify how to contact the election administration. Voter optionally includes this class to specify the …

Used in request and response messages. Enumeration for methods for contacting a voter or an election administration office, used in the Type attribute of ContactMethod. Name Value email For electronic…

A file containing an encrypted file system. When a password is entered, the container appears transparently as a normal drive to the user. When the user logs off, the container is closed, and the data…

See spillage.

The process of monitoring communications such as email and Web pages, analyzing them for suspicious content, and preventing the delivery of suspicious content to users. (SP 800-114) (NISTIR)

A certificate issued for the purpose of digitally signing information (content) to confirm the author and guarantee that the content has not been altered or corrupted since it was signed by use of a c…

(1) A single decision or set of associated decisions being put before the voters (for example, the option of candidates to fill a particular public office or the approval or disapproval of a constitut…

The option selectable by a voter in a given

An area on BALLOT the in which the name of the CONTEST is displayed, possibly along with the number of candidates for which a vote may be cast.

A votable choice that appears under a contest.

A specified area on a ballot where a voter ’s selection in a particular contest can be indicated.

Vote that will be tabulated for a particular contest option.

A selection made on the ballot by a voter with respect to a specific single contest (for example, a candidate, the value “Yes” or “Approve”).

Contestor. Texas Elec. Code §221.007.

A BALLOT cast by a voter whose legitimacy has been questioned. See also CODED BALLOT, PROVISIONAL BALLOT.

An election contest with more candidates that there are vacancies for that election.

A “candidate whose nomination or election is being contested by a CONTESTOR.” Ind. Code §3-5-2-14.

A “person who initiates a proceeding to CONTEST the result of an election.” Ind. Code §3-5-2- 14. Also CONTESTANT. Cf. CONTESTEE.

An electoral district that can be enclosed in a single continuous boundary line.

Key held for use under specific operational conditions or in support of specific contingency plans.

Management policy and procedures used to guide an enterprise response to a perceived loss of mission capability. The Contingency Plan is the first plan used by the enterprise risk managers to determin…

Terminology used in some electronic voting systems or ballot marking devices to indicate that the voter either has more selections or has not cast their ballot.

With respect to INSTANT RUNOFF VOTING, “a ballot that is not EXHAUSTED.” Wash. Rev. Code §29A.53.030.

A coordinated effort within the Federal Government's executive branch to ensure that national essential functions continue to be performed during a catastrophic emergency.

An effort within individual executive departments and agencies to ensure that Primary Mission Essential Functions (PMEFs) continue to be performed during a wide range of emergencies, including localiz…

A predetermined set of instructions or procedures that describe how an or ganization’s mission-essential functions will be sustained within 12 hours and for up to 30 days as a result of a disaster eve…

An effort to ensure that critical data and technology would be available, with priority for critical functions across corporations and industry sectors, to get the economy back up and running after a …

Maintaining ongoing awareness to support organizational risk decisions. See information security continuous monitoring, risk monitoring, and status monitoring

A type of VVPAT in which the paper record is maintained on a continuous roll of paper, such as an adding machine tape. This means that the fi rst ballot image on the roll is that of the first voter, t…

SEQUENTIAL PAPER TRAIL) or may be CUT-SHEET (different ballots on separate pieces of paper). There are two subtypes of cut-sheet systems, those that are VIEW-ONLY (in which the voter may view the pape…

Anything of value given, loaned or advanced to influence a political vote for or against candidates or ballot questions.

The maximum amount that an individual or organization may give, loan or advance to influence a political vote for or against candidates or ballot questions.

Reports that detail political contributions and expenses required to be filed by a governing authority.

The regulations that govern the maximum amount that a candidate or committee can spend to influence a political vote and that an individual or organization may give, loan or advance to influence a pol…

(CCI) Decomposition of a National Institute of Standards and Technology (NIST) co ntrol into a single, actionable, measurable statement.

Information that is entered into a cryptographic module for the purposes of directing the operation of the module. (FIPS 140-2) (NISTIR)

A PORT for “inter-system connection such as VOTING STATION to PRECINCT TABULATOR.” 2007 VVSG.

Software “resident in the voting or ballot c ounting device. It control the readying of equipment and software for election use, pre-election validation testing, and readiness testing prior to opening…

The logistics and accounting system through which COMSEC material marked CRYPTO is distributed, controlled, and safeguarded. Included are the COMSEC central offices of record (COR), cryptologistic dep…

The complete building or facility area under direct physical control within which unauthorized persons are denied unrestricted access and are either escorted by authorized personnel or are under conti…

(C. F. D.) Minimum set of security functionality that enforces access control on individual users and makes them accountable for their actions through login procedures, auditing of security-relevant e…

Any area or space for which the organization has confidence that the physical and procedural protections provided are sufficient to meet the requirements established for protecting the information and…

See CONTROLLING CONTEST.

Secure telecommunications or information system, or associated cryptographic component, that is unclassified and handled through the COMSEC material control system (CMCS), an equivalent material contr…

A device approved by the National Security Agency (NSA) as a controlled cryptographic item, that embodies a cryptographic logic or other cryptographic design, and performs the entire COMSEC function, …

A device approved by the National Security Agency as a controlled cryptographic item that embodies a cryptographic logic or other cryptographic design, and does not perform the entire the COMSEC funct…

A telecommunications or information handling equipment that embodies a CCI component or CCI assembly and performs the entire COMSEC function without dependence on host equipment to operate.

A boundary with a set of mechanisms that enforces the security policies and controls the flow of information between interconnected information systems.

Three-dimensional space surrounding information system equipment, within which unauthorized individuals are denied unrestricted access and are either escorted by authorized individuals or are under co…

Registry The online repository of information and policy regarding how authorized holders of CUI should handle such information.

A “component of a direct recording electronic voting system that allows the poll worker to add information to an ACCESS DEVICE to allow a voter to access the correct ballot style.” Wash. Admin. Code §…

The official responsible for directing the operation of a cryptonet using traditional key and for managing the operational use and control of keying material assigned to the cryptonet.

A CONTEST in which the voter’s choice determine the voter’s ability to vote in a second contest, referred to as the CONTROLLED CONTEST. It is sometimes seen in a RECALL ELECTION. In the CONTROLLING CO…

The domain that assumes the greater risk and thus enforces the most restrictive policy.

A device, procedure, or subsystem, which when properly designed and implemented, ensures correctness of operation in a system. Common controls include completeness of processing checks, authentication…

In general, the ability to vote at one’s conve nience, e.g. at a time and/or place of one’s choosing. It often is used as a synonym for EARLY VOTING or ABSENTEE VOTING, but also refers to the ability …

1. A “meeting of delegates of a political party held for the purpose of designating the candidate or candidates to be endorsed by such party in a pr imary of such party for state or district office or…

(D) a primary election held for the expre ssion of a preference for the nomination of individuals for election to the office of President.” In the above definition, “and” undoubtedly means “or.” See a…

Software “resident in the voting or ballot c ounting device. It control the readying of equipment and software for election use, pre-election validation testing, and readiness testing prior to opening…

A piece of state information supplied by a Web server to a browser, in a response for a requested resource, for the browser to store temporarily and return to the server on any subsequent visits or re…

(CKG) Electronically exchanging functions of locally generated, random components, from which both terminals of a secure circuit construct traffic encryption key or key encryption key for use on that …

Synonymous with manual remote rekeying.

An “election where more than one political subdivision with overlapping boundaries or the same electors holds an election on the same day and the eligible electors are all registered electors, and the…

A property of a software license that requires that any derived works of the original software are accompanied and provided under the same (or a similar) license. This means that if project A has a co…

Subset of application logic that is responsible for vote recording and tabulation.

A vote tabulation computer program used in a RECOUNT replacing one that has been determined to be defective. Texas Elec. Code §214.046.

A “tape designed solely for use in correcting e rrors on data processing cards.” 31 Ky. Admin. Regs. §2:010(1)(11).

HAVA requires that each voter be able to correct her ballot before it is cast.

Action taken to eliminate the causes of an existing deficiency or other undesirable situation in order to prevent recurrence.

A mathematical proof of consistency between a specification and its implementation.

The area within the boundaries of a state which a member of a City or Town Council is elected.

Process of totaling votes.

Ballot that has been processed and whose votes are included in the candidates and measures vote totals.

1. A person who assist in the counting of ba llots at a precinct. Alaska Stat. §15.10.140. Likewise, 26 Okla. Stat. §2-128. 2. A register, either mechanical or electrical, that holds vote totals.

A mode of operation for a symmetric key block cipher algorithm. It combines the techniques of the Counter (CTR) mode and the Cipher Block Chaining-Message Authentication Code (CBC-MAC) algorithm to pr…

Monitoring other competitor organizations and nations to gather information

Counterintelligence means information gathered and activities conducted to identify, deceive, exploit, disrupt, or protect against espionage, other intelligence activities, sabotage, or assassinations…

Actions, devices, procedures, or techniques that meet or oppose (i.e., counters) a threat, a vulnerability, or an attack by eliminating or preventing it, by minimizing the harm it can cause, or by dis…

Actions, devices, procedures, techniques, or other measures that reduce the vulnerability of an information system. Synonymous with security controls and safeguards.

STATION.” Texas Elec. Code §127.003. See also ASSISTANT TABULATION SUPERVISOR.

“The term ‘counting board’ means those election officials charged with counting the ballots at the precinct in counties using paper ballots.” W. V. C. §3-1-29.

The “location or locations designated by the county auditor for the automatic tabulating and counting of ballots.” N. D. C. C. §16.1-06(3). The “computer facilities and surrounding premises designated…

One of “the two judges, one from each majo r political party, who read each vote received by all candidates and each vote for and against all questions at a polling place.” Mo. Rev. Stat. §115-447.1(1…

A “location selected by the county board of election commissioners with respect to all elections for the automatic processing or counting or both of votes.” Ark. Code §7-1-101(6).

A “person selected … to witness the counting of ballots.” Utah Code §20A-1-102(16).

A scale that can estimate counts of objects (such as ballots) based on the objects’ piece weight.

Central Counting Station

The person “in charge of the overall administra tion of the central counting station and the general supervision of the personnel working at the station. Texas Elec. Code §127.002(e).

A body of persons who count ballots in a RECOUNT. Texas Elec. Code §213.005.

A political and administrative division of a state, providing certain local government services.

A county official, in some states, who is responsible for election administration for a county.

A casual term, usually denoting the COUNTY BOARD OF ELECTIONS. Occasionally the term is formally defined in a statute, e.g., “‘County board’ means county board of elections in a county.” N. J. S. §19:…

A group of individuals charged with control of elections and voting procedures for a county.

A county-level body that perform election duties in Georgia.

A body exercising supervisory authority over elections in a county. County Board of Election Commissioners In Arkansas, a three-person board responsible for conducting elections in a county, composed …

The governing body of a county in many U. S. states, especially in the West, consisting of members elected by the voters.

The “body charged by law with the duty of canvassing absentee ballots, of ruling on the validity of questioned or challenged ballots, of the verifying all unofficial returns as listed in the auditor's…

In Texas, the party official responsible for conducting the party’s primary elections.

“The county chairman of each political party represented on the ballot may appoint in writing two WATCHERS for each precinct.” N. M. Stat. Ann. §1-1.27.

A county official who is responsible for election administration for a county.

The governing body of a county in many U. S. states, especially in the Midwest and the East, consisting of members elected by the voters.

Any “ PRIMARY, GENERAL or SPECIAL ELECTION, including a RECALL ELECTION … for elective county office.” Stanislaus County (CA) Code §25.01. County Election Commission The body responsible for county el…

A group of individuals appointed, usually by local authorities and charged with control of elections and voting procedure.

An official who is responsible for election administration for a county.

Election administrative division corresponding to a geographic area that is the basis for determining which contests the voters legally residing in that area are eligible to vote on.

Officials who are responsible for election administration for a county.

A law, issue, or question that appears on a ballot for voters of a county to decide on.

In Vermont, any “judge of probate, assistant judge of the superior court, state's attorney, sheriff, high bailiff, and justice of the peace.” 17 Vt. Stat. Ann. §2103(10).

A county official, in some states, who is responsible for election administration for a county.

A body analogous to the VOTER REGISTRATION COMMISSION in other jurisdictions. County Tax Assessor In Texas, the official responsible for administering the county’s voter registration program.

A political subdivision of a county established to provide a single public service (such as water supply or sanitation) within a specific geographic area.

The county in a state or territory in which, at the time a person or receives services, the person is living and has established on ongoing presence for a permanent or indefinite period of time.

A form of BALLOT ROTATION used in California under which the ordering of candidates differs among supervisorial districts. Cf. STATE-LEVBL ROTATION.

A duly authorized and trustworthy individual who has been officially designated to transport/carry material, and if the material is classified, is cleared to the level of material being transported.

(risk response) A time-phased or situation-dependent combination of risk response measures. See risk response.

(TRANSEC) Result of measures used to obfuscate message externals to resist traffic analysis.

A technique to reduce the risks of eavesdropping by obscuring the information that is transmitted. (SP 800-98) (NISTIR)

An attribute associated with an assessment method that addresses the scope or breadth of the assessment objects included in the assessment (e.g., types of objects to be assessed and the number of obje…

An unintended or unauthorized intra-system channel that enables two cooperating entities to transfer information in a way that violates the system's security policy but does not exceed the entities' a…

Determination of the extent to which the security policy model and subsequent lower- level program descriptions may allow unauthorized access to information.

A system feature that enables one system entity to signal information to another entity by directly or indirectly writing a storage location that is later directly or indirectly read by the second ent…

Testing performed using covert methods and without the knowledge of the organization’s IT staff, but with the full knowledge and permission of upper management. (SP 800-115) (NISTIR)

A system feature that enables one system entity to signal informat ion to another by modulating its own use of a system resource in such a way as to affect system response time observed by the second …

Evidence attesting to one’s right to credit or authority. SOURCE: FIPS 201 Evidence or testimonials that support a claim of identity or assertion of an attribute and usually are intended to be used mo…

A “determination of what BALLOT CONFIGURATION is appropriate for a given voter and creation of the VOTING CREDENTIALS necessary for BALLOT ACTIVATION.” 2007 VVSG.

(CSP) A trusted entity that issues or registers subscriber tokens and issues electronic credentials to subscribers. The CSP may encompass registration authorities (RAs) and verifiers that it operates.…

Physical or electronic document(s) that proves a voter’s identity; used in B. C. local and provincial government elections and most other jurisdictions to authenticate a voter prior to issuing a ballo…

A class of malware designed specifically to automate cybercrime

A part, component or assembly, including so ftware, is considered critical if its FAILURE may result in certain fatal defects in performance, such as faulty recording of a vote. 2007 VVSG.

A component which is or contains information and communications technology (ICT), including hardware, software, and firmware, whether custom, commercial, or otherwise developed, and which delivers or …

The physical and cyber systems and assets that are so vital to the United States that their incapacity or destruction would have a debilitating impact on our physical or economic security or public he…

Council established by DHS under 6 U. S. C. §451 to facilitate effective interaction and coordination of critical infrastructure activities among the Federal Government, the private sector, and State,…

A proposed strategy that will set programmatic and budgetary priorities for a five-year national risk management cycle.

A logical collection of assets, systems, or networks that provide a common function to the economy, government, or society; NIPP 2013 addresses 16 critical infrastructure sectors, as identified in PPD…

Information technology; telecommunications; chemical; transportation systems, including mass transit, aviation, maritime, ground/surface, and rail and pipeline systems; emergency services; and postal …

Obtain (information or input into a particular task or project) by enlisting the services of a large number of people, either paid or unpaid, typically via the internet.

Security-related information (e.g., secret and private cryptographic keys, and authentication data such as passwords and personal identification numbers (PINs)) whose disclosure or modification can co…

Proposed entities/programs that provide the U. S. government with the capacity to test the security of critical technologies and, when appropriate, assist in identifying vulnerabilities, as well as de…

A measure of the degree to which an organization depends on the information or information system for the success of a mission or of a business function.

An end-to-end functional decomposition performed by systems engineers to identify mission critical functions and components. Includes identification of system missions, decomposition into the function…

Refers to the (consequences of) incorrect behavior of a system. The more serious the expected direct and indirect effects of incorrect behavior, the higher the criticality level.

A type of acceptable mark on a paper or mark-sense ballot. See also CHECK MARK.

A certificate issued from a certificate authority (CA) that signs the public key of another CA not within its trust hierarchy that establishes a trust relationship between the two CAs.

The act of manually and/or automatically accessing and/or transferring information between different security domains.

A list managed by the unified cross domain services management office (UCDSMO) that identifies CDSs that are available for deployment within the Department of Defense (DoD) and intelligence community …

The set of functions that enable the transfer of information between security domains in accordance with the policies of the security domains involved.

Applications/services that exist on and are capable of interacting across two or more different security domains.

A single web-site providing access to cross domain services.

Services that provide access and/or transfer of information between different security domains.

A form of controlled interface that provides the ability to manually and/or automatically access and/or transfer information between different security domains.

The process of inspecting data as it traverses a cross domain solution and determines if the data meets pre-defined policy.

A list managed by the unified cross domain services management office (UCDSMO) that identifies cross domain solutions (CDSs) that are or have been in operation, but are no longer available for additio…

A vulnerability that allows attackers to inject malicious code into an otherwise benign website. These scripts acquire the permissions of scripts generated by the target website and can therefore comp…

The act of voting in a primary election “for a ca ndidate of a party with whom the voter is not registered.” Wyo. Rules §1.4(v).

Endorsement of a single candidate or slate of candidates by more than one political party. The candidate or slate appears on the ballot representing each endorsing political party. Also referred to as…

Political allegiances of voters which cut across ethnic, religious and class divisions in a society.

The ENDORSEMENT of a candidate by more than one political party. Sometimes “cross-party endorsement.” Also CROSS-PARTY ENDORSEMENT. Cf. CROSS-FILING.

Cross-filing

Endorsement of a single candidate or slate of candidates by more than one political party. The candidate or slate appears on the ballot representing each endorsing political party.

1. The act of voting STRAIGHT PARTY but then “crossing over” by selecting a candidate of another party in at least one office. 2. Casting a vote in a PRIMARY for a party other than one’s declared part…

The act of a voter participating in a partisan primary election of a party that they are not officially registered or affiliated with.

The operations performed in defeating or circumventing cryptographic protection of information by applying mathematical techniques and without an initial knowledge of the key employed in providing the…

The marking or designator identifying unencrypted COMSEC keying material used to secure or authenticate telecommunications carrying classified or sensitive U. S. Government or U. S. Government-derived…

A class of VVPAT system in which encrypted strings or symbols, such as barcodes or hash codes, are printed on the paper record for secu rity purposes, generally to prevent forgery or alteration of the…

An operator or process (subject), acting on behalf of the operator, performing cryptographic initialization or management functions. (FIPS 140-2) (NISTIR)

A digital currency in which transactions are verified and records maintained by a decentralized system using cryptography, rather than by a centralized authority.

A type of digital currency in which encryption techniques are used to secure transactions and control the creation of additional units while operating independently of a central bank.

Pertaining to, or concerned with, cryptography.

Circuit or device that detects failures or aberrations in the logic or operation of cryptographic equipment. Crypto-alarm may inhibit transmission or may provide a visible and/or audible alarm.

(crypto- algorithm) 1. A well-defined computational procedure that takes variable inputs, including a cryptographic key, and produces an output.

Equipment designed specifically to facilitate efficient or reliable operation of cryptographic equipment, but which does not itself perform cryptographic functions.

Associating two or more related elements of information using cryptographic techniques.

Explicitly defined continuous perimeter that establishes the physical and/or logical bounds of a cryptographic module and contains all the hardware, software, and/or firmware components of a cryptogra…

Hardware or firmware embodiment of the cryptographic logic. A cryptographic component may be a modular assembly, a printed wiring assembly, a microcircuit, or a combination of these items. (CNSSI-4009…

A voting system that uses cryptographic techniques to store an encrypted copyvof the voter’s ballot selections while maintaining ballot secrecy and allows elections outcomes to be independently and un…

Equipment that embodies a cryptographic logic.

A method of sanitization in which the media encryption key (MEK) for the encrypted Target Data is sanitized, making recovery of the decrypted Target Data infeasible.

A cryptographic algorithm that computes a numerical hash value based on a data file or electronic message. It should be infeasible in practice to find two distinct data files or messages that will res…

A function that maps a bit string of arbitrary length to a fixed length bit string. Approved hash functions satisfy the following properties:

NSA-approved products incorporating only UNCLASSIFIED components and UNCLASSIFIED cryptographic algorithms. This does include COTS, products approved by NSA, but does not include composed commercial s…

Device or electronic key used to unlock the secure mode of cryptographic equipment.

Any uninvestigated or unevaluated equipment malfunction or operator or COMSEC Account Manager error that has the potential to jeopardize the cryptographic security of a machine, off-line manual crypto…

Function used to set the state of a cryptographic logic prior to key generation, encryption, or other operating mode.

Value used to control cryptographic operations, such as decryption, encryption, signature generation or signature verification.

The embodiment of one (or more) cryptographic algorithm(s) along with alarms, checks, and other processes essential to effective and secure performance of the cryptgraphic process(es).

All material, including documents, devices, or equipment that contains cryptographic information and is essential to the encryption, decryption, or authentication of telecommunications.

The set of hardware, software, firmware, or some combination thereof that implements cryptographic logic or processes, including cryptographic algorithms, and is contained within the cryptographic bou…

A precise specification of the security rules under which a cryptographic module will operate, including the rules derived from the requirements of this standard (FIPS 140-2) and additional rules impo…

Validates cryptographic modules to Federal Information Processing Standard (FIPS) 140-2 and other cryptography-based standards. The CMVP is a joint effort between National Institute of Standards and T…

Stations that hold a common key.

The time span during which each key setting remains in effect.

A cryptographic key (public, private, or shared) or public key certificate, used for encryption, decryption, digital signature, or signature verification; and other items, such as compromised key list…

Function that randomly determines the transmit state of a cryptographic logic.

Component of COMSEC that results from the provision of technically sound cryptographic systems and their proper use.

The generic term for a cryptographic device, COMSEC equipment, or combination of such devices/equipment containing either a classified algorithm or an unclassified algorithm.

A measure of the expected number of operations required to defeat a cryptographic mechanism. (SP 800-63) (NISTIR)

Process by which a receiving decrypting cryptographic logic attains the same internal state as the transmitting encrypting logic.

Associated information security (INFOSEC) items interacting to provide a single means of encryption or decryption.

Process of establishing the exploitability of a cryptographic system, normally by reviewing transmitted traffic protected or secured by the system under study.

Process of determining vulnerabilities of a cryptographic system and recommending countermeasures.

Examination of a cryptographic system by the controlling authority ensuring its adequacy of design and content, continued need, and proper distribution.

Management technique in which actual holders of a cryptographic system express opinions on the system's suitability and provide usage information for technical evaluations.

A token where the secret is a cryptographic key. SOURCE: SP 800-63 A portable, user-controlled physical device (e.g., smart card or PCMCIA card) used to store cryptographic information and possibly al…

Discipline that embodies the principles, means, and methods for the transformation of data in order to hide their semantic content, prevent their unauthorized use, prevent their undetected modificatio…

A type of cybercrime that involves the unauthorized use of a target's devices (computers, smartphones, tablets, or even servers) by cybercriminals to mine for cryptocurrency

Of or pertaining to cryptology.

The mathematical science that deals with cryptanalysis and cryptography.

Is malware that encrypts data on the targets device and demands a ransom to restore it

Cryptomining is an online threat that hides on a computer or mobile device and uses the machine’s resources to “mine” cryptocurrencies.

A free form message from the electronic key management system (EKMS) Tier 1 that includes the Controlling Authority’s ID and Name, Keying Material Information, Description/Cryptonet Name, Remarks, and…

The capacity within some electoral systems for voters to cast more than one vote for a favoured candidate.

A “listing of vote totals at a given point in tabulation, showing overall totals, as opposed to precinct-by-precinct totals.” 2004 Pasco ESP 6.

A vote variation used in a multiple seat contest where a voter is permitted to distribute a specified number of votes to one or more contest options. Two major variations are used in US elections, one…

When a voter cannot enter a polling place, in some jurisdictions election officers are authorized to assist a voter with voting and casting a ballot outside of the polling place.

The process of fixing an error or providing information to an elections office when your ballot has originally been rejected for counting.

The time period authorized by law or regulations that a voter has to provide required information to allow a ballot to be counted that was originally rejected. This process is often authorized when si…

A ballot that was originally rejected for an error or because it was missing required information but was ultimately counted because the voter corrected the error or supplied the required information.

A method of tabulating WRITE-INS, in which only write-ins for candidates already listed in the ballot are counted. The opposite method I used in some states. In Pennsylvania, for example, a write-in m…

The address where you are current living.

Person with the responsibility for protecting information assets.

A diagonal cut at the corner of a BALLOT to facilitate stacking in a single orientation.

A type of VVPAT in which ballots of different voters are maintained on separate sheets of paper. There are two subdivisions of such system s. In some, such as the Avante system, the paper is fed from …

Relating to, involving, or characteristic of computers, computer networks, information and communications technology (ICT), virtual systems, or computer-enabled control of physical components.

A person who employs the functions of computer networks, systems, devices, or services.

An attack, via cyberspace, targeting an enterprise’s use of cyberspace for the purpose of disrupting, disabling, destroying, or maliciously controlling a computing environment/infrastructure; or destr…

Cyber-hacker group self-identifying as the digital army for ISIS

A cyber operation or series of cyber operations conducted by a single responsible party with the intention of achieving a strategic objective.

Cyber-dependent crime (crimes that can only be committed through the use of ICT devices, where the devices are both the tool for committing the crime and the target of the crime);or cyber–enabled crim…

The totality of products and services that support the cyber crime ecosystem.

A set of processes and measures to detect, monitor, protect, analyze, and defend against network infiltrations. See Cyber Security.

The prevention of cyber action by credibly demonstrating the ability and willingness to deny benefits or impose costs to convince the adversary that restraint will result in better outcomes than will …

An event that is likely to cause or is causing the temporary loss of normal cyber operations or services.

The manipulation, disruption, denial, degradation, or destruction of data, computers, infor- mation or communication systems, networks, physical or virtual infrastructure controlled by computers or in…

Cyber operation whose primary purpose is to steal information for national security or commercial purposes. Cyber Response and Recovery Fund A new fund, administered by the Federal Emergency Managemen…

A planned event during which an organization simulates a cyber disruption to develop or test capabilities such as preventing, detecting, mitigating, responding to or recovering from the disruption.

Actions taken through the use of an information system or network that result in an actual or potentially adverse effect on an information system, network, and/or the information residing therein. See…

The use of cyber operations to shape the perceptions or behavior of targeted audiences while maintaining plausible deniability.

An umbrella term to describe cyber attack, cyber espionage, cyber influence, or cyber defense, and intrusions or activities with unknown intent.

In the NICE Framework, cybersecurity work where a person: Performs activities to gather evidence on criminal or foreign intelligence entities in order to mitigate possible or real-time threats, protec…

In the NICE Framework, cybersecurity work where a person: Performs in-depth joint targeting and cyber planning process. Gathers information and develops detailed Operational Plans and Orders supportin…

The overall ability of systems and organisations to withstand cyber events and, where harm is caused, recover from them. (UK 2016)

A new fund, administered by the Federal Emergency Management Agency but directed by the Cybersecurity and Infrastructure Security Agency. Cyber Recovery Fund disbursement would be triggered by a “cybe…

Risk of financial loss, legal liability, reputational damage, regulatory action, operational dis- ruption, or damage from the failure of the digital technologies employed for informational and/or oper…

The protection of information systems against unauthorized access to or modification of information contained therein, and against the denial of service to authorized users, including those measures n…

Competitions encouraging people to test their skills and to consider a career in cyber. (UK 2016)

A proposed federal declaration that would trigger additional financial and material assistance. The declaration would be used exclusively for responding to, or preemptively preparing for, cyber incide…

A capability and intent that intentionally compromises the confidentiality, integrity, reliabil- ity, or availability of digital devices, systems, networks, or data in transit or at rest.

The collecting, processing, organizing, and analyzing data into actionable information that relates to capabilities, opportunities, actions, and intent of adversaries in the cyber domain to meet a spe…

An emerging field that addresses the intersection of cybersecurity and biosecurity, focusing on protecting biological data, processes, and systems from cyber threats and malicious activities

Practice of risk mitigation online; includes taking steps such as changing passwords frequently and installing antivirus software

In which enemy forces can detect or interfere with electronic devices and use them to cause physical harm

Systems with integrated computational and physical components; ‘smart’ systems. (UK 2016)

Action taken in cyberspace that creates noticeable denial effects (i.e., degradation, disrup- tion, or destruction) in cyberspace or manipulation that leads to denial that appears in a physical domain…

A cyber operation that is primarily motivated by reasons other than national security or geopolitical objectives.

Or cyber spying, is a type of cyberattack in which an unauthorized user attempts to access sensitive or classified data or intellectual property (IP) for economic gain, competitive advantage or politi…

The process of collecting, analyzing, and preserving digital evidence to investigate cybercrimes and other incidents

A £6.5m industry and government scheme to support cutting-edge cyber security research and protect the UK in cyberspace. (UK 2016)

The process of hardening technologies, processes, and controls to protect systems, networks, programs, devices and data from cyber attacks

Measures taken to protect computer systems and data from attach and unauthorized access or use.

A number of roles that have cybersecurity responsibilities which typically form only part of their overall responsibilities within an organization.

Knowing what security threats are and acting responsibly to avoid potential risks.

The interdependent network of information technology infrastructures, and includes the Internet, telecommunications networks, computer systems, and embedded processors and controllers in critical indu…

Cyberspace actions that create various direct denial effects (i.e. degradation, disruption, or destruction) and manipulation that leads to denial that is hidden or that manifests in the physical domai…

A device, computer program, or technique, including any combination of software, firmware, or hardware, designed to create an effect in or through cyberspace.

Actions normally created within DoD cyberspace for securing, operating, and defending the DoD information networks. Specific actions include protect, detect, characterize, counter, and mitigate.

(CO) The employment of cyberspace capabilities where the primary purpose is to achieve objectives in or through cyberspace.

Final Report, March 2020

The degree of dominance in cyberspace by one force that permits the secure, reliable conduct of operations by that force, and its related land, air, maritime, and space forces at a given time and plac…

Refers to anything that has the potential to cause serious harm to a computer system

Typically defined as a set of actions by a nation or organization to attack countries or institutions' computer network systems with the intention of disrupting, damaging, or destroying infrastructure…

An individual who participates in cyberwarfare, motivated either by personal, patriotic, or religious reasons, but not due to professional requirement

(CRC) A type of checksum algorithm that is not a cryptographic hash but is used to implement data integrity service where accidental changes to data are expected.

(CRC) A method to ensure data has not been altered after being sent through a communication channel. (SP 800-72) (NISTIR)