8.03 - Revision history

Neil thibodaux: /* Jamie's Story */

2026-09-15T05:26:57Z

Jamie's Story

← Older revision		Revision as of 22:26, 14 September 2026
Line 13:		Line 13:

	=== Jamie's Story ===		=== Jamie's Story ===
	~~No examples are available~~ to ~~illustrate governance gaps for this attribute~~.
			==== [[June 1, 2026: Judge's Decision]] ====
			The Runbeck Contract that was provided to Jamie had numerous strikeouts and amendments that were poorly documented, especially during the Covid-19 pandemic. Maricopa County would not voluntarily explain these changes and they were not required to maintain documentation because they were not specified as a statutory requirement.

	=== Election Anomalies ===		=== Election Anomalies ===

Neil thibodaux: /* Maricopa Dropbox Collection (2020) */

2026-08-27T22:09:16Z

Maricopa Dropbox Collection (2020)

← Older revision		Revision as of 15:09, 27 August 2026
Line 19:		Line 19:

	The Green Book's <u>emphasis on fraud and information security</u> as separate risk assessment activity is intentional. MC may be able to defer to the Arizona Secretary of State's Election Procedure Manual as general steps taken to ensure the integrity of election results. Fraud occurs when loopholes are identified and exploited by the fraudsters. The implementers of election services (i.e., Arizona Counties) are better positioned to detect fraud and assess the risk of fraud because they are handling the data, not the state. Hence, governance gaps may be identified from patterns of poor assessment and response to risk with respect to election fraud and information security.		The Green Book's <u>emphasis on fraud and information security</u> as separate risk assessment activity is intentional. MC may be able to defer to the Arizona Secretary of State's Election Procedure Manual as general steps taken to ensure the integrity of election results. Fraud occurs when loopholes are identified and exploited by the fraudsters. The implementers of election services (i.e., Arizona Counties) are better positioned to detect fraud and assess the risk of fraud because they are handling the data, not the state. Hence, governance gaps may be identified from patterns of poor assessment and response to risk with respect to election fraud and information security.

			===== Arizona Senate Allegations =====
			Arizona Senate allegations arose from MC's failure to recognize the Arizona Senates Oversight Role. These allegations were investigated and reported on by the [https://www.azag.gov/sites/default/files/2025-06/2020_General_Election_Investigation_Summary.pdf Arizona Attorney General's Office 2020 General Election Investigation]. MC Elected Officials and MC leadership took no action to investigate any of the following potential fraudulent activities to the satisfaction of the Arizona Senate and the AZ AG's inspector, which was unable to resolve the Senate's allegations:

			* [[The Anomalies#Maricopa Election Management Server (2020)\|Maricopa Election Management Server (2020)]]
			** [[The Anomalies#MC EMS 2020 - Election Management System Database Purged\|MC EMS 2020 - Election Management System Database Purged]]
			** [[The Anomalies#MC EMS 2020 - Election Files Deleted\|MC EMS 2020 - Election Files Deleted]]
			** [[The Anomalies#MC EMS 2020 - Corrupt Ballot Images\|MC EMS 2020 - Corrupt Ballot Images]]
			** [[The Anomalies#MC EMS 2020 - Missing Ballot Images\|MC EMS 2020 - Missing Ballot Images]]
			** [[The Anomalies#MC EMS 2020 - Failure to Follow Basic Cyber Security Practices\|MC EMS 2020 - Failure to Follow Basic Cyber Security Practices]]
			** [[The Anomalies#MC EMS 2020 - Subpoenaed Equipment Not Yet Provided\|MC EMS 2020 - Subpoenaed Equipment Not Yet Provided]]
			** [[The Anomalies#MC EMS 2020 - Anonymous Logins\|MC EMS 2020 - Anonymous Logins]]
			** [[The Anomalies#MC EMS 2020 - Dual Boot System Discovered\|MC EMS 2020 - Dual Boot System Discovered]]
			** [[The Anomalies#MC EMS 2020 - Operating System Logs Not Preserved\|MC EMS 2020 - Operating System Logs Not Preserved]]
			** [[The Anomalies#MC EMS 2020 - Internet Connections to the EMS\|MC EMS 2020 - Internet Connections to the EMS]]

	===== [[Dropbox Collection (2020)\|Maricopa Dropbox Collection (2020)]] =====		===== [[Dropbox Collection (2020)\|Maricopa Dropbox Collection (2020)]] =====

Neil thibodaux: /* Jamie's Story */

2026-08-25T16:25:37Z

Jamie's Story

← Older revision		Revision as of 09:25, 25 August 2026
Line 8:		Line 8:
	* '''[[Index of Attributes]]'''		* '''[[Index of Attributes]]'''
	* '''Previous Attribute - [[8.02]]'''		* '''Previous Attribute - [[8.02]]'''
	* '''Next Attribute -[[ 8.04]]'''		* '''Next Attribute - [[ 8.04]]'''
	__FORCETOC__		__FORCETOC__

Neil thibodaux: /* Election Anomalies */

2026-08-25T16:25:18Z

Election Anomalies

@@ Line 19: / Line 19: @@
 The Green Book's <u>emphasis on fraud and information security</u> as separate risk assessment activity is intentional. MC may be able to defer to the Arizona Secretary of State's Election Procedure Manual as general steps taken to ensure the integrity of election results. Fraud occurs when loopholes are identified and exploited by the fraudsters. The implementers of election services (i.e., Arizona Counties) are better positioned to detect fraud and assess the risk of fraud because they are handling the data, not the state. Hence, governance gaps may be identified from patterns of poor assessment and response to risk with respect to election fraud and information security.
 ===== [[Signature Verification|Maricopa County Signature Verification (2020)]] =====
 Governance issues identified from [https://www.azag.gov/sites/default/files/2025-06/2020_General_Election_Investigation_Summary.pdf Arizona Attorney General's Office 2020 General Election Investigation] of Arizona Senate allegations of Maricopa County - Signature Verification Process issues. The Counties appear to embrace Arizona guidance that facilitates fraud and pushback of on any suggestion to address potential fraud. In this case, MC are doing the minimum and comply with the Arizona Secretary of State's Election Procedures Manual. MC has not assessed fraud risk from have a single person, the Signature Verifier, making quick seven-second decisions with loose standards. In 2020, 1,910,317 early ballots were processed through the Signature Verification step. However, only 587 bad signatures were identified (excluding early ballots flagged with no signature).

Neil thibodaux: /* Election Anomalies */

2026-08-25T16:07:23Z

Election Anomalies

← Older revision		Revision as of 09:07, 25 August 2026
Line 16:		Line 16:

	=== Election Anomalies ===		=== Election Anomalies ===
			The Green Book's Principle 8 addresses Assess Fraud, Improper Payment, and Information Security Risk. Obviously, improper payments is not a concern during the Assessment of Election Anomalies. However, improper payments by MC county may exist, but would require a separate assessment.

			The Green Book's <u>emphasis on fraud and information security</u> as separate risk assessment activity is intentional. MC may be able to defer to the Arizona Secretary of State's Election Procedure Manual as general steps taken to ensure the integrity of election results. Fraud occurs when loopholes are identified and exploited by the fraudsters. The implementers of election services (i.e., Arizona Counties) are better positioned to detect fraud and assess the risk of fraud because they are handling the data, not the state. Hence, governance gaps may be identified from patterns of poor assessment and response to risk with respect to election fraud and information security.

	===== [[Signature Verification\|Maricopa County Signature Verification (2020)]] =====		===== [[Signature Verification\|Maricopa County Signature Verification (2020)]] =====
	Governance issues identified from [https://www.azag.gov/sites/default/files/2025-06/2020_General_Election_Investigation_Summary.pdf Arizona Attorney General's Office 2020 General Election Investigation] of Arizona Senate allegations of Maricopa County - Signature Verification Process issues. The Counties appear to embrace Arizona guidance that facilitates fraud and pushback of on any suggestion to address potential fraud. In this case, MC are doing the minimum and comply with the Arizona Secretary of State's Election Procedures Manual. MC has not assessed fraud risk from have a single person, the Signature Verifier, making quick seven-second decisions with loose standards. In 2020, 1,910,317 early ballots were processed through the Signature Verification step. However, only 587 bad signatures were identified (excluding early ballots flagged with no signature).		Governance issues identified from [https://www.azag.gov/sites/default/files/2025-06/2020_General_Election_Investigation_Summary.pdf Arizona Attorney General's Office 2020 General Election Investigation] of Arizona Senate allegations of Maricopa County - Signature Verification Process issues. The Counties appear to embrace Arizona guidance that facilitates fraud and pushback of on any suggestion to address potential fraud. In this case, MC are doing the minimum and comply with the Arizona Secretary of State's Election Procedures Manual. MC has not assessed fraud risk from have a single person, the Signature Verifier, making quick seven-second decisions with loose standards. In 2020, 1,910,317 early ballots were processed through the Signature Verification step. However, only 587 bad signatures were identified (excluding early ballots flagged with no signature).

Neil thibodaux: /* Election Anomalies */

2026-08-22T18:40:33Z

Election Anomalies

← Older revision		Revision as of 11:40, 22 August 2026
Line 16:		Line 16:

	=== Election Anomalies ===		=== Election Anomalies ===
	~~No examples are available~~ to ~~illustrate governance gaps for~~ this ~~attribute~~.
			===== [[Signature Verification\|Maricopa County Signature Verification (2020)]] =====
			Governance issues identified from [https://www.azag.gov/sites/default/files/2025-06/2020_General_Election_Investigation_Summary.pdf Arizona Attorney General's Office 2020 General Election Investigation] of Arizona Senate allegations of Maricopa County - Signature Verification Process issues. The Counties appear to embrace Arizona guidance that facilitates fraud and pushback of on any suggestion to address potential fraud. In this case, MC are doing the minimum and comply with the Arizona Secretary of State's Election Procedures Manual. MC has not assessed fraud risk from have a single person, the Signature Verifier, making quick seven-second decisions with loose standards. In 2020, 1,910,317 early ballots were processed through the Signature Verification step. However, only 587 bad signatures were identified (excluding early ballots flagged with no signature).

Neil thibodaux at 04:43, 22 August 2026

2026-08-22T04:43:21Z

← Older revision		Revision as of 21:43, 21 August 2026
Line 7:		Line 7:
	'''>>>Navigational Buttons<<<'''		'''>>>Navigational Buttons<<<'''
	* '''[[Index of Attributes]]'''		* '''[[Index of Attributes]]'''
	* '''Previous Attribute - ?'''		* '''Previous Attribute - [[8.02]]'''
	* '''Next Attribute - ?'''		* '''Next Attribute -[[ 8.04]]'''
	__FORCETOC__		__FORCETOC__

	=== '''No ~~Examples'''~~ ===
			=== Jamie's Story ===
			No examples are available to illustrate governance gaps for this attribute.

			=== Election Anomalies ===
			No examples are available to illustrate governance gaps for this attribute.

Neil thibodaux at 22:37, 15 August 2026

2026-08-15T22:37:14Z

← Older revision		Revision as of 15:37, 15 August 2026
Line 4:		Line 4:

	'''Attribute''' '''8.03''' - Management identifies risks related to fraud, improper payments, and information security on a periodic and ongoing basis to provide a basis for analyzing risks. Risk assessment is the identification and analysis of risks related to achieving the defined objectives to form a basis for designing risk responses. To determine the scope and frequency of these assessments, management considers the entity's objectives, risk tolerances, any legal or regulatory requirements, and other factors. However, management may determine that the risk assessments need to be performed more frequently than required by legal or regulatory requirements due to the significance of risks or other factors, such as changes to programs. For example, to adequately identify risks related to improper payments for new programs, management may perform improper payment risk assessments for a certain program or activity on a more frequent and recurring basis, regardless of the required frequency in legal or regulatory requirements for such risk assessments.		'''Attribute''' '''8.03''' - Management identifies risks related to fraud, improper payments, and information security on a periodic and ongoing basis to provide a basis for analyzing risks. Risk assessment is the identification and analysis of risks related to achieving the defined objectives to form a basis for designing risk responses. To determine the scope and frequency of these assessments, management considers the entity's objectives, risk tolerances, any legal or regulatory requirements, and other factors. However, management may determine that the risk assessments need to be performed more frequently than required by legal or regulatory requirements due to the significance of risks or other factors, such as changes to programs. For example, to adequately identify risks related to improper payments for new programs, management may perform improper payment risk assessments for a certain program or activity on a more frequent and recurring basis, regardless of the required frequency in legal or regulatory requirements for such risk assessments.

			'''>>>Navigational Buttons<<<'''
			* '''[[Index of Attributes]]'''
			* '''Previous Attribute - ?'''
			* '''Next Attribute - ?'''
			__FORCETOC__

			=== '''No Examples''' ===

Neil thibodaux at 22:08, 15 August 2026

2026-08-15T22:08:23Z

← Older revision		Revision as of 15:08, 15 August 2026
Line 3:		Line 3:
	'''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk'''		'''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk'''

	'''Attribute''' '''8,03''' - Management identifies risks related to fraud, improper payments, and information security on a periodic and ongoing basis to provide a basis for analyzing risks. Risk assessment is the identification and analysis of risks related to achieving the defined objectives to form a basis for designing risk responses. To determine the scope and frequency of these assessments, management considers the entity's objectives, risk tolerances, any legal or regulatory requirements, and other factors. However, management may determine that the risk assessments need to be performed more frequently than required by legal or regulatory requirements due to the significance of risks or other factors, such as changes to programs. For example, to adequately identify risks related to improper payments for new programs, management may perform improper payment risk assessments for a certain program or activity on a more frequent and recurring basis, regardless of the required frequency in legal or regulatory requirements for such risk assessments.		'''Attribute''' '''8.03''' - Management identifies risks related to fraud, improper payments, and information security on a periodic and ongoing basis to provide a basis for analyzing risks. Risk assessment is the identification and analysis of risks related to achieving the defined objectives to form a basis for designing risk responses. To determine the scope and frequency of these assessments, management considers the entity's objectives, risk tolerances, any legal or regulatory requirements, and other factors. However, management may determine that the risk assessments need to be performed more frequently than required by legal or regulatory requirements due to the significance of risks or other factors, such as changes to programs. For example, to adequately identify risks related to improper payments for new programs, management may perform improper payment risk assessments for a certain program or activity on a more frequent and recurring basis, regardless of the required frequency in legal or regulatory requirements for such risk assessments.

Neil thibodaux: Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8,03''' - Management identifies risks related to fraud, improper payments, and information security on a periodic and ongoing basis to provide a basis for analyzing risks. Risk assessment is the identification and analysis of risks related to achieving the defined objectives to form a basis for designing risk responses. To determine the scope and f..."

2026-08-15T22:07:57Z

Created page with "'''Risk Assessment''' '''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk''' '''Attribute''' '''8,03''' - Management identifies risks related to fraud, improper payments, and information security on a periodic and ongoing basis to provide a basis for analyzing risks. Risk assessment is the identification and analysis of risks related to achieving the defined objectives to form a basis for designing risk responses. To determine the scope and f..."

New page

'''Risk Assessment'''

'''Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk'''

'''Attribute''' '''8,03''' - Management identifies risks related to fraud, improper payments, and information security on a periodic and ongoing basis to provide a basis for analyzing risks. Risk assessment is the identification and analysis of risks related to achieving the defined objectives to form a basis for designing risk responses. To determine the scope and frequency of these assessments, management considers the entity's objectives, risk tolerances, any legal or regulatory requirements, and other factors. However, management may determine that the risk assessments need to be performed more frequently than required by legal or regulatory requirements due to the significance of risks or other factors, such as changes to programs. For example, to adequately identify risks related to improper payments for new programs, management may perform improper payment risk assessments for a certain program or activity on a more frequent and recurring basis, regardless of the required frequency in legal or regulatory requirements for such risk assessments.

← Older revision		Revision as of 15:09, 27 August 2026
Line 19:		Line 19:

	The Green Book's <u>emphasis on fraud and information security</u> as separate risk assessment activity is intentional. MC may be able to defer to the Arizona Secretary of State's Election Procedure Manual as general steps taken to ensure the integrity of election results. Fraud occurs when loopholes are identified and exploited by the fraudsters. The implementers of election services (i.e., Arizona Counties) are better positioned to detect fraud and assess the risk of fraud because they are handling the data, not the state. Hence, governance gaps may be identified from patterns of poor assessment and response to risk with respect to election fraud and information security.		The Green Book's <u>emphasis on fraud and information security</u> as separate risk assessment activity is intentional. MC may be able to defer to the Arizona Secretary of State's Election Procedure Manual as general steps taken to ensure the integrity of election results. Fraud occurs when loopholes are identified and exploited by the fraudsters. The implementers of election services (i.e., Arizona Counties) are better positioned to detect fraud and assess the risk of fraud because they are handling the data, not the state. Hence, governance gaps may be identified from patterns of poor assessment and response to risk with respect to election fraud and information security.

			===== Arizona Senate Allegations =====
			Arizona Senate allegations arose from MC's failure to recognize the Arizona Senates Oversight Role. These allegations were investigated and reported on by the [https://www.azag.gov/sites/default/files/2025-06/2020_General_Election_Investigation_Summary.pdf Arizona Attorney General's Office 2020 General Election Investigation]. MC Elected Officials and MC leadership took no action to investigate any of the following potential fraudulent activities to the satisfaction of the Arizona Senate and the AZ AG's inspector, which was unable to resolve the Senate's allegations:

			* [[The Anomalies#Maricopa Election Management Server (2020)\|Maricopa Election Management Server (2020)]]
			** [[The Anomalies#MC EMS 2020 - Election Management System Database Purged\|MC EMS 2020 - Election Management System Database Purged]]
			** [[The Anomalies#MC EMS 2020 - Election Files Deleted\|MC EMS 2020 - Election Files Deleted]]
			** [[The Anomalies#MC EMS 2020 - Corrupt Ballot Images\|MC EMS 2020 - Corrupt Ballot Images]]
			** [[The Anomalies#MC EMS 2020 - Missing Ballot Images\|MC EMS 2020 - Missing Ballot Images]]
			** [[The Anomalies#MC EMS 2020 - Failure to Follow Basic Cyber Security Practices\|MC EMS 2020 - Failure to Follow Basic Cyber Security Practices]]
			** [[The Anomalies#MC EMS 2020 - Subpoenaed Equipment Not Yet Provided\|MC EMS 2020 - Subpoenaed Equipment Not Yet Provided]]
			** [[The Anomalies#MC EMS 2020 - Anonymous Logins\|MC EMS 2020 - Anonymous Logins]]
			** [[The Anomalies#MC EMS 2020 - Dual Boot System Discovered\|MC EMS 2020 - Dual Boot System Discovered]]
			** [[The Anomalies#MC EMS 2020 - Operating System Logs Not Preserved\|MC EMS 2020 - Operating System Logs Not Preserved]]
			** [[The Anomalies#MC EMS 2020 - Internet Connections to the EMS\|MC EMS 2020 - Internet Connections to the EMS]]

	===== [[Dropbox Collection (2020)\|Maricopa Dropbox Collection (2020)]] =====		===== [[Dropbox Collection (2020)\|Maricopa Dropbox Collection (2020)]] =====