DRAFT - FORENSIC AUDIT SCOPE OF WORK.PDF

Maricopa County Elections Department
Forensic Audit Considerations - Draft Scope of Work
Forensic Audit Objective(s):
A forensic audit will review Maricopa County’s Tabulation equipment to:
 Analyze its hacking vulnerability,
 Verify that no malicious malware was installed,
 Test that tabulators were not sending or receiving information over the internet,
 Confirm that no vote switching occurred,
 Verify State and County procurement regulations were followed when leasing the equipment.
Audit Procedures Audit Firm Timeline1
Step 1
a. Certified Software: Verify that the County’s
tabulation equipment is operating federal and
state certified software. This testing will verify
that: (1) the County is using certified equipment, Proposal: Two
(2) the equipment is in compliance with state law, Separate
and (3) the equipment and installed software Reviews of Step
Firm 1 Audit Work:
underwent rigorous security testing and is not 1a-c.
 Week of February 1
vulnerable to hacking
b. Malware: Verify that there is no malware Performed by
Firm 2 Audit Work:
installed on the tabulation equipment. This two firms
 Week of February 8
testing will confirm that hackers and/or a bad certified by the
actors did not install any software or hardware U.S. Elections
that could access or transmit information Assistance
c. Internet Connection: Verify that the tabulation Commission.
equipment is not connected to the internet and
was not connected to the internet during the
November 2020 General Election. This testing
will confirm tabulators were not sending or
receiving information over the internet.
Step 2
Performed by
a. Logic and Accuracy Test: Conduct an accuracy
one firm certified
test County’s tabulation equipment. This Firm 1 Audit Work:
by the U.S.
testing will verify that the County’s tabulation  Week of February 1
Elections
equipment is accurate. It will also confirm that
Assistance
there was no vote switching occurring during
Commission.
the election
Step 3
Performed by an Firm 3 Audit Work:
a. Contract Review: Perform a contract review of
independent CPA  Task Order: Early
the procurement of Maricopa County’s
audit firm under February
tabulation equipment. This will verify that the
guidance of  Audit Work:
tabulation equipment was leased according to
Internal Audit. February-March
State and County procurement regulations.
1 Blackout Period: Ballot Tabulation Center access restricted February 20 – March 19 due to the
March Jurisdictional Election – City of Goodyear.