W. Va. Code R. § 153-55-3

Current through Register Vol. XLI, No. 36, September 6, 2024

Section 153-55-3 - Definitions

3.1. "Authorized user" means a county clerk employee, temporary employee, or other individual authorized by the county clerk or Secretary of State to access and interact with an endpoint device or election technology.

3.2. "Continuity of Operations Plan" or "COOP" means a written document that sets forth an agency's plan to ensure they can continue to perform their duties and mission essential functions in the event of a wide range of emergencies.

3.3. "County election fund" means a county's separate account for use by the clerk of the county commission for improving election administration, infrastructure, and security, in accordance with the standards set forth in this Rule.

3.4. "Device" or "endpoint device" means any physical or virtual equipment or mechanism that connects to and exchanges information with a computer network. Examples include a desktop computer, mobile phone, or server.

3.5. "Election technology" means voter registration systems, voting systems, electronic pollbooks, election results reporting systems, and other technologies used to register, maintain, or process voters or used in the conduct of an election.

3.6. "Endpoint protection" means a software solution deployed on an endpoint device for security purposes that functions to prevent malware attacks, detect malicious activity, and provide investigation and remediation capabilities needed to respond to security incidents and alerts.

3.7. "Incident" means an event that actually or potentially jeopardizes the confidentiality, integrity, or availability of election technology or the information processed, stored, or transmitted by election technology. Common synonyms for this term include breach, hack, intrusion, exfiltration, or ransomware attack.

3.8. "Incident Response Plan" or "IRP" means a written document outlining an organization's roles and procedural steps before, during, and after a confirmed or suspected election security incident.

3.9. "Minimum reserve funding" means the total amount of moneys in a county election fund that is equal to average statewide cost of upgrading voting equipment per precinct as provided in subsection 6.2 of this Rule multiplied by the total number of county precincts as required by W. Va. Code § 11-22-2(c).

3.10. "National Institute of Standards and Technology" or "NIST" is the federal agency that creates critical measurement solutions for science, standards, and technology.

3.11. "Primary Administrative Contact" means the county clerk or their designee who is responsible for making final decisions that affect the administration of elections in the jurisdiction.

3.12. "Primary Technical Contact" means the individual responsible for making decisions as they relate to technology that support elections. This individual is typically a county clerk's chief information or other employee or contractor responsible for providing technical services and support to the county clerk's office for election systems and other office technologies.

3.13. "Plan of Actions and Milestones" or "POA&M" means a document that identifies deficiencies or failures in an agency's systems or operations and details tasks and resources that are required to accomplish the elements of a plan, milestones for meeting the tasks, and the scheduled completion dates for the milestones.

3.14 "Supported operating system" means the software that manages a device's hardware, software, or service programs, which receive timely updates and security patches.

W. Va. Code R. § 153-55-3