View source for MC EMS 2020 - Subpoenaed Equipment Not Yet Provided

In your exploration of election-related anomalies, you are here:

* List of [[The Anomalies|Election Anomalies]]
** [https://www.azag.gov/sites/default/files/2025-06/2020_General_Election_Investigation_Summary.pdf Arizona Attorney General's Inspector's report of Arizona Senate of Allegations]
*** Allegation [[Maricopa Election Management Server (2020)|#3: Maricopa County Election Department - Election Management System]]----[Click for [[Dropbox Collection (2020)|Allegation #2]] or Allegation #4]
**** Sub-allegation '''#6 - Subpoenaed Equipment Not Yet Provided''' ---- [Click for [[MC EMS 2020 - Failure to Follow Basic Cyber Security Practices|Sub-allegation #5]] or [[MC EMS 2020 - Anonymous Logins|Sub-Allegation #7]]]

This page seeks to explain potential governance gaps with respect to allegations from the Arizona Senate, specifically for allegation #3 Maricopa County Election Department - Election Management System anomalies. These were investigated by the Arizona Attorney General's Office 2020 General Election Investigation Report. This topic is listed on [[The Anomalies|'''Election Anomalies''']] page, which lists various election-related anomalies that illustrate poor governance.

''Governance Gaps'' are reported on and compared to a standard so that you may visualize how poorly managed County services can have an adverse impact without any criminal wrongdoing. We chose the United States Government Accountability Office's (GAO) ''Standards for Internal Control in the Federal Government'' (also known as the ''Green Book'') because it represents the ideal standard for governance practices since it is specifically written for government entities, not the business sector. Maricopa County has no obligation or commitments to adhere to any governance-related standards, including the Green Book. Regardless, the Green Book is a representation of what good governance looks like and deviations from that standard are worthy of consideration, not prosecution.
 The Governance Gap Assessment Team are not IT security experts. The technical aspects of the IT configuration are not being disputed. The assessment for governance gaps sought to understand how data and information was being treated with respect to the US GAO's Standards for Internal Control in the Federal Government.

=== [[Maricopa Election Management Server (2020)]] ===
Governance issues identified from Arizona Attorney General's Office 2020 General Election Investigation of Arizona Senate allegations of Maricopa County Election Department - Election Management Server (EMS) issues.

==== MC EMS 2020 - Supoenaed Equipment Not Yet Provided ====
Governance gaps were identified from Arizona Attorney General's Office 2020 General Election Investigation of Arizona Senate allegations #3 Maricopa County Election Department - Election Management Server (EMS) issues, which consisted of ten separate allegations. MC EMS 2020 - Election Management System Database Purged is an assessment of one of the ten sub-allegations associated with the EMS.

===== Allegation =====
Cyber Ninjas alleges the Maricopa County Recorder's Office did not provide all of the equipment requested under the subpoena.

===== <u>Relevant Inspector Notes</u> =====
"During an interview with Mr. Gates from the Maricopa County Board of Supervisors, all data and equipment was provided as requested by the subpoena and that items not subpoenaed were not provided to the State Senate. He further related that sensitive routers and log files were not provided and were part of the settlement agreement. Mr. Gates stated he is not aware of what was provided to Cyber Ninjas by the Senate and that question should be directed to Senate President Fann."

===== <u>Inspector's Finding</u> =====
Unfounded Allegation. According to statements made by Mr. Bill Gates and a letter dated September 17, 2021 by State Senate President Karen Fann to Attorney General Mark Brnovich, all materials were provided to the State Senate by Maricopa County.

===== <u>Governance Gaps Assessment</u> =====

* It's interesting to note that the allegation was against the Maricopa County Recorder's Office (MCRO). However, the AZ AG's inspector directed his questions to the Chairman of the Maricopa County Board of Supervisors (MCBOS). The MCRO does not report to the MCBOS.
* The equipment was not voluntarily released to the Arizona State Senate, which was in an oversight role. Apparently, the issue was litigated, and the scope of equipment was agreed upon in a court settlement.
* The AZ AG's inspector reports that the Chairman of the MCBOS is withholding sensitive routers and log files as part of the settlement agreement.

=== Potential Governance Gap(s): ===

* Principle 1 - Demonstrate Commitment to Integrity and Ethical Values
** Attribute(s): [[1.01]], [[1.02]], [[1.03]], [[1.04]], [[1.05]]
* Principle 2 - Exercise Oversight Responsibility
** Attribute(s): [[2.01]]
* Principle 3 - Establish Structure, Responsibility, and Authority
** Attribute(s): [[3.01]]
* Principle 4 - Demonstrate Commitment to Competence
** Attribute(s):
* Principle 5 - Enforce Accountability
** Attribute(s): 
* Principle 6 - Define Objectives and Risk Tolerances
** Attribute(s):
* Principle 7 - Identify, Analyze, and Respond to Risks
** Attribute(s): [[7.05]], [[7.09]],  [[7.15]]
* Principle 8 - Assess Fraud, Improper Payment, and Information
** Attribute(s): [[8.01]], [[8.02]], [[8.03]], [[8.04]], [[8.05]], [[8.06]], [[8.10]], [[8.14]], [[8.15]]
* Principle 9 - Identify, Analyze, and Respond to Change
** Attribute(s):
* Principle 10 - Design Control Activities
** Attribute(s):
* Principle 11 - Design General Control Activities over Information
** Attribute(s): [[11.02]], [[11.11]]
* Principle 12 - Implement Control Activities
** Attribute(s):
* Principle 13 - Use Quality Information
** Attribute(s):
* Principle 14 - Communicate Internally
** Attribute(s):
* Principle 15 - Communicate Externally
** Attribute(s): [[15.02]], [[15.09]]
* Principle 16 - Perform Monitoring Activities
** Attribute(s): [[16.09]], [[16.10]]
* Principle 17 - Evaluate Issues and Remediate Deficiencies
** Attribute(s):