West Virginia Code of State Rules › Agency 153 - Secretary Of State › Title 153 - LEGISLATIVE RULE SECRETARY OF STATE › Series 153-55 - Minimum Standards For Election Administration, Infrastructure, And Security › Section 153-55-3 - Definitions

Current through Register Vol. XLI, No. 28, July 12, 2024
3.1. "Authorized
				user" means a county clerk employee, temporary employee, or other individual
				authorized by the county clerk or Secretary of State to access and interact
				with an endpoint device or election technology.
3.2. "Continuity of Operations Plan" or
				"COOP" means a written document that sets forth an agency's plan to ensure they
				can continue to perform their duties and mission essential functions in the
				event of a wide range of emergencies.
3.3. "County election fund" means a county's
				separate account for use by the clerk of the county commission for improving
				election administration, infrastructure, and security, in accordance with the
				standards set forth in this Rule.
3.4. "Device" or "endpoint device" means any
				physical or virtual equipment or mechanism that connects to and exchanges
				information with a computer network. Examples include a desktop computer,
				mobile phone, or server.
3.5.
				"Election technology" means voter registration systems, voting systems,
				electronic pollbooks, election results reporting systems, and other
				technologies used to register, maintain, or process voters or used in the
				conduct of an election.
3.6.
				"Endpoint protection" means a software solution deployed on an endpoint device
				for security purposes that functions to prevent malware attacks, detect
				malicious activity, and provide investigation and remediation capabilities
				needed to respond to security incidents and alerts.
3.7. "Incident" means an event that actually
				or potentially jeopardizes the confidentiality, integrity, or availability of
				election technology or the information processed, stored, or transmitted by
				election technology. Common synonyms for this term include breach, hack,
				intrusion, exfiltration, or ransomware attack.
3.8. "Incident Response Plan" or "IRP" means
				a written document outlining an organization's roles and procedural steps
				before, during, and after a confirmed or suspected election security
				incident.
3.9. "Minimum reserve
				funding" means the total amount of moneys in a county election fund that is
				equal to average statewide cost of upgrading voting equipment per precinct as
				provided in subsection 6.2 of this Rule multiplied by the total number of
				county precincts as required by W. Va. Code §
									11-22-2(c).
3.10. "National Institute of Standards and
				Technology" or "NIST" is the federal agency that creates critical measurement
				solutions for science, standards, and technology.
3.11. "Primary Administrative Contact" means
				the county clerk or their designee who is responsible for making final
				decisions that affect the administration of elections in the
				jurisdiction.
3.12. "Primary
				Technical Contact" means the individual responsible for making decisions as
				they relate to technology that support elections. This individual is typically
				a county clerk's chief information or other employee or contractor responsible
				for providing technical services and support to the county clerk's office for
				election systems and other office technologies.
3.13. "Plan of Actions and Milestones" or
				"POA&M" means a document that identifies deficiencies or failures in an
				agency's systems or operations and details tasks and resources that are
				required to accomplish the elements of a plan, milestones for meeting the
				tasks, and the scheduled completion dates for the milestones.
3.14 "Supported operating system" means the
				software that manages a device's hardware, software, or service programs, which
				receive timely updates and security patches.