7.13
Risk Assessment
Principle 7 - Identify, Analyze, and Respond to Risks
Attribute 7.13 - After designing risk responses, management then considers residual risk. In instances where a risk response results in the residual risk exceeding defined risk tolerances, management revisits and revises the response. Operating within the defined risk tolerance provides greater assurance that the entity will achieve its objectives.
>>>Navigational Buttons<<<
- Index of Attributes
- Previous Attribute - 7.12
- Next Attribute -7.14
Jamie's Story
No examples are available to illustrate governance gaps for this attribute.
Election Anomalies
Principle 7 addresses the need to Identify, Analyze, and Respond to Risks. The identification and analysis of risk are presumed to have been performed at the state level, which are addressed in the Arizona Secretary of State's Election Procedure Manual. The MC leadership team's Response to Risk is the primary governance weakness with respect to the Green Book's Principle #7, including this attribute.
Governance issues identified from Arizona Attorney General's Office 2020 General Election Investigation of Arizona Senate allegations of Maricopa County Election Department - Drop Box Collections issues. Section 2 of the AZ AG's inspector's report identifies numerous issues, which present risk to potential fraud.
This attribute states, "Operating within the defined risk tolerance provides greater assurance that the entity will achieve its objectives. Instead of stopping business processes," Instead of implementing drop box collections as defined in procedures, MC management facilitated five-procedure violations, which may have opened the door to tens of thousands of fraudulent votes.
- See the heading Deviation: Allegations Confirmed from Maricopa Dropbox Collection (2020) webpage.
