The file's text, extracted by GovTribe without its formatting.
STATE OF ILLINOIS
GLOSSARY
STATE OF ILLINOIS
ATTACHMENT D - GLOSSARY
This glossary of terms and acronyms is provided for the convenience of Offerors responding to RFP #
25-448DOIT-ADMIN-B-46893
| Term or Acronym |
| Acronym meaning |
| Definition |
| A2A |
| Application to Application |
| The integration of applications and business processes within the same company (also known as an enterprise) |
| ADAAA |
| Americans with Disabilities Act Amendment Act |
| Includes Standards for Accessible Design published in September 2010. These standards state that all electronic and information technology must be accessible to people with disabilities. See also IITAA. |
| AES |
| Advanced Encryption Standard |
| A symmetric block cipher chosen by the U.S. government to protect classified information |
| AMD |
| Advance Molecular Detection |
| This initiative aims to improve the identification and characterization of infectious diseases by increasing critical next generation sequencing (NGS) and bioinformatics capacities at CDC and at state and local health departments. |
| ANSI |
| American National Standards Institute |
| A private nonprofit organization that oversees the development of voluntary consensus standards for products, services, processes, systems, and personnel in the United States. |
| API |
| Application Programming Interface |
| A way for two or more computer programs to communicate with each other. |
| ASCII |
| American Standard Code for Information Interchange |
A character encoding standard for electronic communication.
ATO
Authority to Operate a formal declaration by a Designated Approving Authority (DAA) that authorizes operation of a Business Product and explicitly accepts the risk to agency operations.
| BI |
| Business Intelligence |
| Comprises the strategies and technologies used by enterprises for the data analysis and management of business information. |
BidBuy
The State of Illinois online e-procurement system
| BPEL |
| Business Process Execution Language |
| An XML-based language that allows web services, APIs, and human processes in a service-oriented architecture (SOA) to interconnect and share data in a business workflow. |
Business Hours
8:00 a.m. to 5:00 p.m., Central Time, Monday through Friday, excluding State observed holidays.
| CASB |
| Cloud Access Security Broker |
| on-premises or cloud-based software that sits between cloud service users and cloud applications and monitors all activity and enforces security policies. |
| CDC |
| Center for Disease Control |
| The Center for Disease Control is the national public health agency of the United States. It is the United States Federal agency under the Department of Health and Human Services. |
| CFR |
| Code of Federal Regulations |
| In the law of the United Stated, the Code of Federal Regulations is codification of the general and permanent regulations promulgated by the executive departments and agencies of the federal government of the United States. The CFR is divided into 50 titles that represent broad areas subject to federal regulation. |
| CLIA |
| Clinical Laboratory Improvement Amendments |
| Regulate laboratory testing and require clinical laboratories to be certified by the Center for Medicare and Medicaid Services (CMS) before they can accept human samples for diagnostic testing. |
| CLI |
| Command Line Interface |
| A means of interacting with a device or computer program with commands from a user or client, and responses from the device or program, in the form of lines of text. |
| CMS |
| Centers for Medicare and Medicaid Services |
| Federal oversight agency for state Medicaid and CHIP programs. |
| COTS |
| Commercial Off the Shelf |
| Readily available commercial IT products. |
| CPSA |
| Consumer Product Safety Act |
| Protects the public from unreasonable risks of serious injury or death from thousands of types of consumer products under its jurisdiction, including products that pose a fire, electrical, chemical, or mechanical hazard or can injure children. |
| CSA |
| Cloud Security Alliance |
| The world's leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. |
| CSV |
| Comma Separated Values |
| A comma-separated values file is a delimited text file that uses a comma to separate values. Each line of the file is a data record. Each record consists of one or more fields, separated by commas. |
| Data Model |
| Data Model |
| A form to explain the structure and relationships of data that is independent of its storage method. |
| DDI |
| Design, Development and Implementation |
| A process that encompasses all design, development and implementation activities required to effectively implement a technical solution. |
| DDOS |
| Distributed Denial-of-Service |
| A cyber-attack in which the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting the services of a host connected to a network. |
| DEDs |
| Deliverable Expectation Documents |
| Presents pertinent information (e.g., deliverable description, applicable industry standards, contract or SOW references, acceptance criteria and schedule) specifying the expectations of a deliverable. |
| DICOM |
| Digital Imaging and Communications in Medicine |
| A standard protocol for the management and transmission of medical images and related data and is used in many healthcare facilities. |
| DMZ |
| Demilitarized Zone |
| Demilitarized Zone used for network partition |
| DoD |
| Definition of Done |
| Definition of done (DoD) is a criterion one must meet before a product or feature is considered complete. |
| DoIT |
| Illinois Department of Innovation and Technology |
| Illinois state agency charged with responsibility for the information technology functions of agencies under the jurisdiction of the governor |
| DLP |
| Data Loss Prevention |
| A cybersecurity solution that detects and prevents data breaches and is used for internal security and regulatory compliance. |
| DTD |
| Document Type Definition |
| Defines the structure and the legal elements and attributes of an XML document. |
| EDI |
| Electronic Data Interchange |
| Electronic Data Interchange is the intercompany communication of business documents in a standard format. The simple definition of EDI is a standard electronic format that replaces paper-based documents such as purchase orders or invoices. By automating paper-based transactions, organizations can save time and eliminate costly errors caused by manual processing. |
| EHR |
| Electronic Health Record |
| An EHR is a systematized collection of patients and population electronically stored health information in a digital format. These records can be shared across different health care settings |
| eICR |
| Electronic Initial Case Report |
| The actual electronic message being sent through the eCR process. |
| EPI-lab |
| Epidemiology Reference Laboratory |
| Epidemiology Reference Laboratory |
| ER |
| Enhancement Request |
| A request by Customer to add functionality or enhance performance beyond the specifications of the Service and are not included as part of Support Services. |
| ESB |
| Enterprise Service Bus |
| Rules and principles for integrating numerous applications together over a bus-like infrastructure |
| ETL |
| Extract-Transform-Load |
| A three-phase process where data is extracted, transformed, and loaded into an output data container. The data can be collated from one or more sources, and it can also be output to one or more destinations. |
| ETOR |
| Electronic Test Orders and Results |
| Presents results to be viewed in near real-time, enabling quick action to be taken if needed for early intervention. |
| FDA |
| U.S. Food and Drug Administration |
| Responsible for protecting the public health by ensuring the safety, efficacy, and security of human and veterinary drugs, biological products, and medical devices; and by ensuring the safety of our nation's food supply, cosmetics, and products that emit radiation. |
| FedRAMP |
| Federal Risk and Authorization Management Program |
| A United States federal government-wide compliance program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. |
| FHIR |
| Fast Healthcare Interoperability Resources |
| Standard defines how healthcare information can be exchanged between different computer systems regardless of how it is stored in those systems. |
| FISMA |
| The Federal Information Security Management Act |
| A United States federal law requiring federal agencies to develop, document, and implement an information security and protection program. |
| FOIA |
| Illinois Freedom of Information Act |
| Law requiring full or partial release of information controlled by the State. |
Gold Copy
A set of test data established and maintained as the test data for all test cases needed to cover the features of the system. All manual and automated testing uses copies of the Gold Copy, and never the original. The goal is for the Gold Copy to be improved to the point it contains all test data needed.
| GUI |
| Graphical User Interface |
| User interfaces allow users to interact with electronic devices through graphical icons and audio indicators like primary notation, instead of text-based UIs, typed command labels or text navigation. |
| HHS |
| United States Department of Health and Human Services |
| Federal oversight agency for social service programs including cash assistance programs and Centers for Medicare and Medicaid Services. |
| HIPAA |
| Health Insurance Portability and Accountability Act |
| A federal law requiring national standards to protect sensitive patient health information from being disclosed without the patient's consent or knowledge. |
| HITECH |
| Health Information Technology for Economic and Clinical Health |
| Enacted to promote the adoption and meaningful use of health information technology by healthcare practitioners. Part of the American Recovery and Reinvestment Act (ARRA) of 2009. |
| HL7 |
| Health Level Seven |
| HL7 refers to a set of international standards for transfer of clinical and administrative data between software applications used by various healthcare providers. |
| HTML |
| Hypertext Markup Language |
| The standard markup language for documents designed to be displayed in a web browser. |
| HTTP |
| Hypertext Transfer Protocol |
| An application layer protocol in the Internet protocol suite model for distributed, collaborative, hypermedia information systems. |
| HTTPS |
| Hypertext Transfer Protocol Secure |
| A combination of the Hypertext Transfer Protocol (HTTP) with the Secure Socket Layer (SSL)/Transport Layer Security (TLS) protocol. TLS is an authentication and security protocol widely implemented in browsers and Web servers. |
| ICD |
| Interface Control Document |
| A record of all interface information generated for a project. |
| IDPH |
| Illinois Department of Public Health |
| An advocate for and partner with the people of Illinois to re-envision health policy and promote health equity, prevent, and protect against disease and injury, and prepare for health emergencies. |
| IEC |
| International Electrotechnical Commission |
| An international standards organization that prepares and publishes international standards for all electrical, electronic, and related technologies – collectively known as "electrotechnology". |
| IEEE |
| Institute of Electrical and Electronics Engineers |
| Ensure communication between various devices; it also helps to make sure that the network service, i.e., the Internet and its related technologies, must follow a set of guidelines and practices so that all the networking devices can communicate and work smoothly. |
| INCITS |
| International Committee for Information Technology Standards |
| An ANSI-accredited standards development organization composed of information technology developers. It was formerly known as the X3 and NCITS. INCITS is the central U.S. forum dedicated to creating technology standards. |
| IIOP |
| Internet Inter-ORB Protocol |
| Internet Inter-ORB Protocol |
| IITAA |
| Illinois Information Technology Accessibility Act |
| Requires Illinois agencies and universities to ensure that their web sites, information systems, and information technologies are accessible to people with disabilities. IITAA establishes specific standards and encourages the State to address accessibility proactively. See also ADAAA (Americans with Disabilities Act Amendments Act). |
| ILCS |
| Illinois Compiled Statutes |
| Illinois Compiled Statutes |
| iPaaS |
| Integration Platform as a Service |
| A suite of cloud services enabling development, execution and governance of integration flows connecting any combination of on premises and cloud-based processes, services, applications, and data within individual or across multiple organizations. |
| IPG |
| Illinois Procurement Gateway |
| Automated system provided by the Illinois Capital Development Board that allows vendor registration with the state. |
| IQ/OQ/PQ |
| Installation Qualification, Operational Qualification, Performance Qualification |
| Sequential activities that manufacturers carry out to validate their manufacturing processes. |
| IRS |
| Internal Revenue Service |
| Federal agency responsible for collecting taxes and administering the Internal Revenue Code, the main body of federal statutory tax law. |
| ISA |
| Independent Security Assessment |
| A technical analysis of identified controls designed to measure Cyber Security maturity. |
| ISO |
| International Organization for Standardization |
| Organization that develops standards and its related activities to facilitate the international exchange of products and services. |
| ITIL v3 |
| Information Technology Infrastructure Library version 3 |
| A set of standards used in the industry to provide infrastructure-based services. |
| ITIL |
| Information Technology Information Library |
| Set of detailed practices for IT activities that focus on aligning IT services with business needs. |
| IVRS |
| Illinois Vital Record System |
| Illinois Department of Public Health’s online vital records request system. |
Jira
Atlassian Issue & Project Tracking Software
| KPI |
| Key Performance Indicator |
| A performance measurement used to evaluate progress towards program goals. |
| LAN |
| Local Area Network |
| Local Area Network |
| LIMS |
| Lab Information Management System |
| A laboratory information management system for the division of Laboratories. |
| LOINC |
| Logical Observation Identifiers Names and Codes |
| Clinical terminology that is important for laboratory test orders and results and is one of a suite of designated standards for use in U.S. Federal Government systems for the electronic exchange of clinical health information. |
| LRN |
| Laboratory Response Network |
| The LRN's purpose is to run a network of laboratories that can respond to biological and chemical threats and other public health emergencies. |
| M&O |
| Maintenance and Operations |
| Daily operations services and needed maintenance services for the IL IES system. |
| Maintenance and Operations Plan |
| Maintenance and Operations Plan |
| A plan that is included in overall Project Management Plan |
| MFA |
| Multifactor Authentication |
| An authentication system that requires more than one distinct authentication factor for successful authentication. |
| MOU |
| Memorandum of Understanding |
| A starting point of negotiations between multiple parties to signal the intent of doing business or coming to an agreement. |
| MPI |
| Message Passing Interface |
| A standardized and portable message-passing standard designed to function on parallel computing architectures. |
| NCCLS |
| National Committee for Clinical Laboratory Standards |
| Outlines generally agreed upon guidelines for reliable and reproducible results. |
| NPI |
| National Provider Identification |
| Health Insurance Portability and Accountability Act (HIPAA) Administrative Simplification Standard. The NPI is a unique identification number for covered health care providers. |
| NIST |
| National Institute of Standards and Technology |
| A non-regulatory agency of the US Department of Commerce that sets standards as needed by industry or government programs. |
| NTP |
| Network Time Protocol |
| Network Time Protocol |
| OCM |
| Organizational Change Management |
| Organizational Change Management |
| ODBC |
| Open Database Connectivity |
| Standard application programming interface (API) for accessing database management systems (DBMS) |
| OEM |
| Office of Emergency Management |
| Manage incidents, coordinate events, operate communications systems, and provide technology, among other forms of support, to City services to strengthen their respective missions and to protect lives and property. |
| ORS |
| Outbreak Reporting System |
| A web-based platform health departments in the U.S. use to report disease outbreaks to CDC. |
| OS |
| Operating System |
| The program that manages all of the other application programs in a computer. |
| OSI |
| Open-Source Initiative |
| Defines open-source software as software that is distributed with human readable source code in order to allow the user freedom to run, review, alter, enhance, and modify the code for any purpose. |
| OWASP |
| Open Web Application Security Project |
| A non-profit organization that helps website owners and security experts protect web applications from cyber-attacks. |
| PCI-DSS |
| Payment Card Industry Data Security Standard |
| An information security standard used to handle credit cards from major card brands. The standard is administered by the Payment Card Industry Security Standards Council, and its use is mandated by the card brands. |
| PH |
| Public Health |
| The science of protecting and improving the health of people and their communities. |
| PHI |
| Protected Health Information |
| Protected Health Information |
| PHLIP |
| Public Health Laboratory Interoperability Project |
| Focus on patient safety, coupled with specialized risk management services, emphasis on prompt event reporting, early resolution, and superior claims administration, ensures that its members have the best possible solution for their medical malpractice needs. |
| PHIN |
| Public Health Information Network |
| CDC software that facilitates secure electronic message transport between CDC and public health information systems. |
| PII |
| Personally Identifiable Information |
| Personally Identifiable Information |
| PIPA |
| Personal Information Protection Act |
| An Illinois State Law that creates specific requirements for public universities and other data collectors to notify individuals when their personal information, such as their social security number, may have been improperly accessed. |
| PM |
| Project Manager |
| The process of leading the work of a team or teams to achieve goals and meet success criteria at a specified time. It includes several related projects with the intention of improving an organization's performance. |
| PMI |
| Project Management Institute |
| Project Management Institute |
| PMP |
| Project Management Plan |
| Certification to recognize project managers who have proven they have the skills to successfully manage projects. Project Management Professional (PMP)® certification represents an elite group of project managers. It proves project leadership experience and expertise in any way of working. |
| POAM |
| Plan of Action and Milestones |
| A document for a system that “identifies tasks needing to be accomplished. |
| Project Schedule |
| Project Schedule |
| Project Schedule |
| QC |
| Quality Control |
| A system of maintaining standards in manufactured products by testing a sample of the output against the specification. |
| RBAC |
| Role-Based Access Controls |
| Refers to the idea of assigning permissions to users based on their role within an organization. It offers a simple, manageable approach to access management that is less prone to error than assigning permissions to users individually. |
| REST API |
| REST API |
| An API that conforms to the design principles of the REST, or representational state transfer architectural style. |
| RFP |
| Request for Proposal |
| A business document that announces a project, describes it, and solicits bids from qualified contractors to complete it. |
| RMI |
| Remote Method Invocation |
| A Java API that performs remote method invocation, the object-oriented equivalent of remote procedure calls, with support for direct transfer of serialized Java classes and distributed garbage-collection. |
| RPO |
| Recovery Point Objectives |
| Maximum acceptable amount of data loss after an unplanned data-loss incident, expressed as an amount of time. |
| RTM |
| Requirements Traceability Matrix |
| A document used to ensure that the requirements defined for a system are linked at every point during the verification process. |
| RTO |
| Recovery Time Objective |
| The maximum acceptable time that an application, computer, network, or system can be down after an unexpected disaster, failure, or comparable event takes place. |
| SaaS |
| Software-as-a-Service |
| A method of software delivery and licensing in which software is accessed online via a subscription, rather than bought and installed on individual computers. |
| SAN |
| Storage Area Network |
| A specialized, high-speed network that provides network access to storage devices. |
| SCID |
| Severe combined immunodeficiency |
| A group of rare disorders caused by mutations in different genes involved in the development and function of infection-fighting immune cells. |
| SDLC |
| Software Development Life Cycle |
| The cost-effective and time-efficient process that development teams use to design and build high-quality software. |
| SECaaS |
| Security as a Service |
| Security as a Service includes, but not limited to authentication, antivirus, anti-malware/spyware, intrusion detection, and security event management. |
| SIT |
| System Integration Testing |
| A type of software testing in an integrated hardware and software environment to verify the behavior of the complete system. |
| SIEM |
| Security Information and Event Management |
| A solution that helps organizations detect, analyze, and respond to security threats before they harm business operations. |
| SLA |
| Service Level Agreement |
| Defines the level of service expected from a vendor, including metrics and remedies. |
| SLR |
| Service Level Requirements |
| System requirements that specify the conditions upon which the SLA is based. |
| SNTP |
| Simple Network Time Protocol |
| An application is a time-maintenance application that you can use to synchronize hardware in a network. |
| SNOMED |
| Systemized Nomenclature of Medicine |
| A systematically organized computer-processable collection of medical terms providing codes, terms, synonyms, and definitions used in clinical documentation and reporting. |
| SME |
| Subject Matter Expert |
| An individual with qualifications and experience in a particular field or work process; an individual who by education, training, and/or experience is a recognized expert on a particular subject, topic, or system. |
| SOA |
| Service Oriented Architecture |
| A method of software development that uses software components called services to create business applications. |
| SOAP |
| Simple Object Access Protocol |
| A lightweight XML-based protocol that is used for the exchange of information in decentralized, distributed application environments. |
| SQL |
| Structured Query Language |
| Structured Query Language |
| SSA |
| Social Security Administration |
| An independent agency of the U.S. federal government that administers Social Security, a social insurance program consisting of retirement, disability, and survivor benefits. |
| SSL |
| Secure Sockets Layer |
| A protocol that provides secure communication over the Internet. |
State
Departments of Public Health, Human Services (DHS), Innovation and Technology (DoIT), and their business and technical stakeholders.
| TCP/IP |
| Transmission Control Protocol (TCP) / Internet Protocol (IP) |
| Transmission Control Protocol (TCP) / Internet Protocol (IP) |
| Test Plan |
| Test Plan |
| Includes: |
Unit Testing Functional Testing Integration Testing Security Testing Regression Testing Stress/Load Testing Performance Testing
| TLS |
| Transport Layer Security |
| Formerly known as Secure Sockets Layer (SSL), is a protocol used by applications to communicate securely across a network, preventing tampering with and eavesdropping on email, web browsing, messaging, and other protocols. |
| TPA |
| Trading Partner Agreement |
| An agreement related to the exchange of information in electronic transactions, whether the agreement is distinct or part of a larger agreement, between each party to the agreement. |
| UAT |
| User Acceptance Testing |
| A type of testing where monitored authorized users determine whether a system meets all requirements and will support the business need. |
| UI |
| User Interface |
| The point of human-computer interaction and communication in a device. |
| UPS |
| Uninterruptible Power Supply |
| Provides backup power, protecting equipment from damage in the event of grid power failure. An uninterruptible power supply (UPS) is a type of device that powers equipment, nearly instantaneously, in the event of grid power failure, protecting the equipment from damage. |
| UX |
| User Experience |
| How a user interacts with and experiences a product, system, or service. It includes a person's perceptions of utility, ease of use, and efficiency. |
| Vendor |
| Vendor |
| The Vendor, or one of the Vendors, selected and contracted to participate in planning, implementing, maintaining, enhancing, upgrading, operating, providing support, etc. of the Solution |
| VPAT |
| Voluntary Product Accessibility Template |
| A document that explains how information and communication technology (ICT) products such as software, hardware, electronic content, and support documentation meet (conform to) the Revised 508 Standards for IT accessibility. |
| WAN |
| Wide Area Network |
| A computer network to which the computers are connected may be far apart, generally having a radius of half a mile or more. |
| WS-I |
| Web Services Interoperability |
| Promotes interoperability amongst the stack of web services specifications. |
X12
A protocol from the American National Standards Institute (ANSI) for electronic data interchange (EDI).
| XHTML |
| Extensible HyperText Markup Language |
| A hybrid language between XML and HTML and is also an accepted standard in the coding world. |
| XML |
| Extensible Markup Language |
| A metalanguage which allows users to define their own customized markup languages, especially in order to display documents on the internet. |
| XSD |
| XML Schema Definition |
| A recommendation by the World Wide Web Consortium (W3C) to describe and validate the structure and content of an XML document. It is primarily used to define the elements, attributes, and data types that the document can contain. |
State of Illinois RFP 35 Attachment K – Glossary V.1.1 State of Illinois Attachment D - Glossary RFP # 25-448DOIT-ADMIN-B-46893 1