2 - FORENSIC AUDIT TRANSMITTAL LETTER.PDF

MARICOPA COUNTY
Elections Department RECORDER
UN
TO: The Maricopa County Board of Supervisors
FROM: Scott Jarrett, Director of Election Day and Emergency Voting, Maricopa County
Rey Valenzuela, Director of Election Services and Early Voting, Maricopa County
SUBJECT: Update on Forensic Audit of Maricopa County’s Tabulation Equipment
DATE: February 23, 2021
After the Maricopa Board of Supervisors voted on January 27, 2021 to conduct a forensic audit of the Dominion Voting Systems
tabulation equipment and software that Maricopa County used in the November 2020 General Election, the Maricopa County
Elections Department has taken the necessary steps to complete the first two portions of this audit. The forensic audit is
comprised of three separate audits performed by two United States Elections Assistance Commission Voting System Testing
Laboratories and a Certified Public Accounting Firm.
The purpose of this memo is to provide a summary of the audit results and transmit the final reports for the first two portions of
the audit that were completed by the certified Voting System Testing Laboratories (Pro V&V and SLI Compliance). Berry Dunn is
performing the procurement review and the final portion of the audit and expects it to be completed by the end of March.
Audit Results
The Maricopa County Elections Department contracted with Pro V&V and SLI Compliance to perform an audit of the Maricopa
County’s Tabulation System and Equipment (Dominion Democracy Suite 5.5b). The objectives of the audit(s) and the results are
summarized in the following table:
TEST OBJECTIVE PRO V&V FIELD AUDIT SLI COMPLIANCE FORENSIC AUDIT
All tested software and equipment was
DETERMINE IF INSTALLED SOFTWARE All tested systems and equipment were
inspected and verified to be using
WAS U.S. EAC AND AZ SOS CERTIFIED using certified software
certified software
DETERMINE IF ANY MALICIOUS
MALWARE OR HARDWARE WAS No malicious hardware and software No malicious malware or hardware was
INSTALLED ON THE SYSTEM OR discrepancies were identified detected
EQUIPMENT
The system was determined to be a
DETERMINE IF TABULATORS WERE No evidence of an Internet Connection
“closed network” and does not have
CONNECTED TO THE INTERNET was Identified
internet access
PERFORM A LOGIC AND ACCURACY TEST
The logic and accuracy test resulted in N/A — Test was not included in SLI’s
TO DETERMINE IF VOTE SWITCHING
accurate numbers Scope of Work
COULD OCCUR
These four test objectives analyzed whether Maricopa County’s configuration and setup of the Dominion Democracy Suite 5.5B
and related equipment were hacked, transmitting information over the internet, and/or allowing voting switching to occur. Two
separate expert Voting System Testing Laboratories found that the County was using certified equipment and software; with no
malicious hardware; that was not connected to the internet. Pro V&V also confirmed that the tabulation equipment was
configured and programed to tabulate the November 2020 General Election ballots accurately.
The combination of these findings along with the pre and post logic & accuracy tests performed by the Arizona Secretary of State, the
post-election hand count performed by the political parties, and the many security protocols implemented by the Elections
Department confirm that Maricopa County Elections Department's configuration and setup of the tabulation equipment and election
management system provided an accurate counting of ballots and reporting of election results.
510 South 3 Ave | Phoenix, Arizona 85003 | Phone: (602) 506-1511 | Fax: (602) 506-3273

MARICOPA COUNTY
pe iyre)
Elections Department RECORDER
UN
Selected Audit Firms
The Elections Department selected Pro V&V and SLI Compliance to perform these two portions of the forensic audit because they
were independent of the County. Both laboratories are also certified by the U.S. EAC and with a combined 29 years of experience
in testing and certifying voting equipment. These are the only firms we believed possessed the knowledge and expertise to perform
this very detailed and technical analysis to determine that the voting equipment and system were correctly configured and did
not possess any vulnerabilities.
Furthermore, the Department of Homeland Security designated tabulation equipment as critical election infrastructure. Any
exposure of the source code to an unqualified and non-vetted third party could jeopardize tabulation systems used by voting
jurisdictions nationwide. Pro V&V and SLI Compliance undergo audits by the U.S. EAC and the National Institute of Standards and
Technology, the organizations tasked with testing and certifying election equipment. In selecting Pro V&V and SLI Compliance, we
were confident that the Elections Department would not be jeopardizing the security of the source code and the certification of
the equipment which is needed by Maricopa County to perform elections in 2021 (March, May, August, and November) and in
future years.
Audit Report Transmittal
Included with this memo are the following two audit reports and attachments:
(1) Pro V&V = Maricopa County DVS DS 5.5B Post Audit Report
(2) SLI Compliance — Maricopa County DVS DS 5.5B Forensic Audit Report 1.0 and Attachment(s) A, B, and C
Sincerely,
Scott Jarrett Rey Valenzuela
Director of Election Day & Emergency Voting Director of Election Services & Emergency Voting
Maricopa County Elections Department Maricopa County Elections Department
510 South 3'4 Ave | Phoenix, Arizona 85003 | Phone: (602) 506-1511 | Fax: (602) 506-3273