8.07

Risk Assessment

Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk

Attribute 8.07 - As part of a risk assessment, management considers the risk of fraud that could impact the entity from both within the entity and from external parties. For example, external fraud risk may arise when an entity relies on service organizations' internal control systems to perform business processes for the entity. External parties that present fraud risk may also include program beneficiaries who fraudulently obtain benefits.

>>>Navigational Buttons<<<

• Index of Attributes
• Previous Attribute - 8.06
• Next Attribute - 8.08
• Similar Attributes - 8.05

Examples from Jamie's Story

No examples are available

Examples from the Anomalies

March 12, 2026: This is How Maricopa County Wants to be Represented in Court

Additional details regarding this aspect of my story are available in a subsection titled Contract with the Motor Vehicle Department (MVD).

In 2024, the Arizona Secretary of State, Adrian Fontes, issued a press release on September 30, 2024, which described how over 218,000 voter registration records were adversely impacted during the collection of data by the MVD and subsequent transfer to the MC Recorders Office. The press release states, "Staff and experts from the Secretary of State’s Office are continuing to work with MVD to investigate if additional voters are impacted, or if other similar errors stemming from improperly coded Proposition 200 rules exist. We will continue to keep the public informed of developments if and when we have accurate, confirmed information to share." The Information Security Risk was real based on the number of corrupted records identified. Yet, MC managers and legal team had no written agreements between them and the MVD.

Potential Green Book Deviation

Contrary to the Green Book, there is no evidence to suggest MC recognized the significance of elevated risk associated with receiving data from an external entity, which was the MVD.