Maricopa Election Management Server (2020)

From Corrective Action Plan AZ

In your exploration of election-related anomalies, you are here:

This page provides an overview of Arizona Attorney General's Office 2020 General Election Investigation Report.

Click on the list of Sub-allegations for an analysis of the potential governance gaps. 

The Governance Gap Assessment Team are not IT security experts. The technical aspects of the IT configuration are not being disputed. The assessment for governance gaps sought to understand how data and information was being treated with respect to the US GAO's Standards for Internal Control in the Federal Government.

List of Election Management System Sub-allegations

The following allegations were submitted by the Arizona Senate in 2021 to the Arizona Attorney General for investigation. These were investigated as allegation #3 in the AZ AG's inspector report. Each sub-allegation was assessed independently for governance gaps, which are explained on separate web pages.

  1. Election Management System Database Purged
  2. Election Files Deleted
  3. Corrupt Ballot Images
  4. Missing Ballot Images
  5. Failure to Follow Basic Cyber Security Practices
  6. Subpoenaed Equipment Not Yet Provided
  7. Anonymous Logins
  8. Dual Boot System Discovered
  9. Operating System Logs Not Preserved
  10. Internet Connections to the EMS

8 - Dual Boot System Discovered

Allegation

Cyber Ninjas analyzed a system labeled Adjudication 2 and revealed the system contained two bootable hard drives. Cyber Ninjas stated neither Pro V&V not SLI identified this in their report.Relevant Inspector Notes

  • By review of a publicly available document, Correcting the Record - January 2022, there was a second hard drive found on one computer.
  • The second hard drive was not powered on or used at any time while in Maricopa County's possession.
  • The second hard drive did not play a role in any Maricopa County election as it was not plugged into the computer, and therefore not operational.
  • County Election Officials stated SLI confirmed the presence of this drive on an adjudication state labeled "ADJ-54."
  • During the SLI audit, the drive was photographed and forensic clone was created for analysis.
  • SLI determined the drive was not plugged in and was last used on 7/31/2019, which was prior to County Elections receiving items.


Inspector's Finding

Undetermined.

  • County Elections makes statements about SLI Compliance findings related to dual boot systems. However, within the SLI report, there is no mention of this finding.
  • Furthermore, County Elections stated they did not retain copies of photos for this portion of the SLI report but stated that are available by request from SLI.
  • Elections was unsure if it was the same computer identified by Cyber Ninjas, based upon the two dates available from Cyber Ninjas and SLI, and the different naming conventions. It is unclear if they were referring to the same computer.


Governance Gaps Assessment

x

9 - Operating System Logs Not Preserved

Allegation


Relevant Inspector Notes


Inspector's Finding


Governance Gaps Assessment

x

10 - Internet Connections to the EMS

Allegation


Relevant Inspector Notes


Inspector's Finding


Governance Gaps Assessment

x

Retrieved from "https://arizonacitizenvoice.com/index.php?title=Maricopa_Election_Management_Server_(2020)&oldid=2092"