A1601 APPROVED REVISION 03.13.2024.DOCX

MARICOPA COUNTY INTERNAL POLICY
Policy Number:
A1601
Current Adoption Date:
MM-DD-2024
Policy Title:
INFORMATION TECHNOLOGY 
GOVERNANCE
Current Implementation Date:
MM-DD-2024
Board Agenda Number:
C-##-##-###-#-##
Approved by:
BOARD OF SUPERVISORS
Original Adoption Date:
08-1999
I. PURPOSE
To implement a Governance structure for Information Technology (IT) that 1) focuses decision making at the 
optimal business level, 2) consistently promotes systems synergy and integration, and 3) maximizes 
efficiency of resource utilization. 
The highest purpose of technology deployment is to enable efficient horizontal business processes, effective 
decision making, information sharing, and collaboration.
II. APPLICATION
This Policy applies to all Maricopa County appointed departments as well as the Flood Control District of 
Maricopa County, the Maricopa County Library District, and the Maricopa County Stadium District (Special 
Districts). The Board of Supervisors is authorized to jointly adopt policies applying to the Special Districts 
under the Intergovernmental Agreement, C-06-18-393-6-00, approved on April 11, 2018.
This policy also applies to employees of County elected offices unless the elected official has implemented 
a similar policy specific to his or her office.
The Judicial Branch (Superior Court, Adult Probation, Juvenile Probation and Justice Courts) has agreed that 
the Judicial Branch will adhere to County information technology policies unless the Judicial Branch has an 
equivalent or more restricted policy and provided County policies do not interfere or otherwise impede their 
ability to carry-out their required Constitutional and Statutory responsibilities nor restrict their ability to function 
as a separate and independent government entity.
III. DEFINITIONS
A.
Appointing Authority: An elected official, the single administrative or executive head of a 
Department/Special District, or the designated representative authorized to act in this capacity.
B.
Chief Information Officer (CIO) Council: The IT governing body of the County, composed of the highest-
level technology leadership for entities, e.g., Maricopa County CIO and CIOs for elected offices and the 
Judicial Branch.
C.
Core Business Systems: Technology systems that centrally support Countywide functions. 
D.
County Electronic Community: may be characterized as either: 
1.
Organizational - Defined by processes or information that formally tie a group of entities together, 
making them interdependent, e.g., Criminal Justice Agencies; or
2.
Functional - Defined by an interest in a common issue, e.g., public information or the sale of data; or 
a subject, e.g., GIS.
E.
County Technology Resource (CTR): Any computing account; device (e.g., mobile device, smartphone, 
tablet, computer, communications equipment, video conference, facsimile, or telephone); peripheral; 
software; local, wireless and wide area networks (i.e., LAN, Wi-Fi and WAN); ESI; website; cloud-based

Policy Number:
A1601
Policy Title:
INFORMATION TECHNOLOGY 
GOVERNANCE
Current Adoption Date:
MM-DD-2024
Page 2 of 7
or internally-hosted system; or related consumable (disk space, processor time, network bandwidth) 
owned by, contracted with, or controlled by the County (Elected or Appointed Department) or by the 
Judicial Branch. 
F.
Department:  A separate County entity defined by the County organizational chart. For purposes of this 
policy, County Districts are considered a department. A department may have a sophisticated suite of 
network, desktop, server, and cloud technology woven together to support their business and their 
customers.
G. Enterprise Architecture (EA): At the direction of the CIO Council, EA is the process of standardizing and 
organizing IT infrastructure so that County-funded entities achieve business objectives.
H.
Enterprise Level: Those functions which maintain and coordinate the IT Infrastructure of the County.
I.
Governance: The processes that ensure the effective and efficient use of IT in enabling the County to 
achieve its business objectives. Policy and standards are defined centrally with the participation of all 
levels, while IT operations in support of business functions are implemented and supported at the closest 
level appropriate to the business function.
J.
Information Technology (IT): Any information system or other technology used to support the primary 
business function of any County operation. May also be referred to as information system or application.
K.
IT Capital Acquisitions: Investments made in the equipment base that operates for a reasonable period 
known as the life cycle. The replacement of that capital must be part of an overall investment strategy.
L.
IT Infrastructure: Includes multiple components consisting of 1) the Countywide data centers, data, voice, 
video, wireless network, and public safety wireless radio, 2) enterprise-wide core administrative systems, 
3) core collaboration services including the County Internet home page, the County Intranet, and 
Microsoft Office 365 environment, and 4) enterprise-wide information security resources.
M. Judicial Branch: Includes the Superior Court, Adult Probation and Juvenile Probation functioning within 
Maricopa County. The Presiding Judge, as appointed by the Arizona Supreme Court, is the sole local 
authority to administer and govern all Judicial Branch operations.
N.
Life-Cycle Costing: An identification of expenditures, both initial and ongoing equipment, maintenance, 
and human resource allocations for an IT Capital Acquisition, from project initiation through full 
implementation, to obsolescence or replacement (part of the investment strategy), projected on an 
annualized basis.
O. Maricopa County Board of Supervisors (BOS): Five-member board that is comprised of a qualified elector 
from each of the five supervisorial districts within Maricopa County.
P.
Maricopa County Chief Information Officer (CIO): The lead Technology Officer appointed by the County 
Manager.
Q. Technology Officer: The most senior IT leadership position within a County-funded entity, e.g., Chief 
Information Officer or Information Services Director. 
IV. POLICY
A.
Governance Model Framework
To ensure that IT resources deliver maximum business value, the County will employ a federated structure 
to manage IT. Reflecting the overall business model of decentralized County management, the federated 
approach balances the benefits of local autonomy with the advantages of Countywide IT coordination and

Policy Number:
A1601
Policy Title:
INFORMATION TECHNOLOGY 
GOVERNANCE
Current Adoption Date:
MM-DD-2024
Page 3 of 7
management. It simultaneously allows responsiveness to business issues and accountability to local 
management, while establishing a convergent IT direction and optimized infrastructure.
The federated structure recognizes the following three levels:
Enterprise
Policy, standards, infrastructure, core systems, security, and
telecommunications
County Electronic Community
Processes, systems, and data shared between County-funded 
entities
Department
Systems internal to a specific department or functional area
Each of these three tiers represents varying blends of integration and autonomy. At each level, an IT function 
is autonomous except as it relates to the tiers above, where it must follow the prevailing policies, standards, 
conventions, and practices for purposes of business process and system integration.
B.
Guiding Principles
The following principles form the foundation of this Governance model:
1.
Departments are fully responsible for the benefits and costs of IT deployed in their operations. They 
will assume accountability for delivering productivity gains derived from technology implementation 
according to their business strategies and plans. Departments will employ solutions that provide the 
lowest overall business cost to the County. To optimize technology and business alignment, 
Appointing Authorities should establish a direct reporting relationship with their Technology Officer.
2.
Significant investment in new technology will not be made until processes have been first re-
engineered or enhanced by eliminating redundant tasks and duplicate data. Data should be entered 
into the information system only once at the point of origin. Departments will build horizontal business 
processes around citizens, business partners, and internal customers. Technology must measurably 
enhance the productivity or quality of work based upon full Life-Cycle Costing. Common systems will 
be used for all similar business functions unless verifiable proof exists that some functions must 
remain different or unique. Shared systems resources and common data repositories will be 
leveraged wherever possible.
3.
Technology investments will be made in compliance with the Procurement Code.
4.
Whenever the need arises for additional technology capability, consideration will be given to 
enhancing existing systems before opting for entirely new systems. Small, timely, incremental 
improvements must be considered prior to any investment in large and comprehensive programs. 
Large, new initiatives will be funded and executed in incremental phases as feasible to 1) 
demonstrate proof of concept, 2) minimize risk, and 3) track achievement of business goals.
5.
The preferred approach to new systems will be to integrate purchased applications that are based 
upon recognized industry standards and common user interfaces. Custom development will be 
considered if more cost-effective and if capable of meeting any deadlines. New systems will be 
validated through extensive user acceptance testing and other best practices prior to deployment. 
6.
The strategic alignment of major programs, as defined by the CIO Council, will be assigned to one 
of the three Governance tiers: Enterprise, County Electronic Community, or County-funded 
entity/Department. Business and technology oversight will be maintained throughout the program life 
cycle. Independent reviews by either Internal Audit or external service providers may be requested 
by County Leadership and/or Board of Supervisors as appropriate.

Policy Number:
A1601
Policy Title:
INFORMATION TECHNOLOGY 
GOVERNANCE
Current Adoption Date:
MM-DD-2024
Page 4 of 7
7.
The IT Infrastructure shall allow employees, citizens, and business partners to satisfy most of their 
business needs using electronic means. The IT Infrastructure will provide access to applications and 
data regardless of where it is located. 
8.
CTR will be leveraged effectively and efficiently through the adoption of common standards and 
shared information. 
9.
Departmental architects will define the interfaces between Enterprise Level systems (standardizing 
interfaces rather than content). Well-defined interfaces will last longer than the systems they connect 
and will provide greater flexibility in the choice of systems.
10. Information systems can be periodically audited for compliance to relevant County policy by the 
Internal Audit Department, special contract, or as requested by the BOS, County Manager, Deputy 
County Managers, Chief Officers, or Appointing Authorities.
C.
Authority and Responsibility
1.
Maricopa County Board of Supervisors (BOS)
a.
The BOS is the approval authority for information systems policy, major programs, and IT Capital 
Acquisition for the County.
2.
Judicial Branch
a.
The Presiding Judge is the approval authority for information systems policy, major programs, 
and IT Capital Acquisition for the Judicial Branch.
3.
Maricopa County Chief Information Officer (CIO)
The CIO is responsible for:
a.
Providing the strategic vision and resource deployment at the Enterprise Level; acting as a 
change agent and principal integrator of the County’s IT mission and technical capability.
b.
Defining the Enterprise Architecture and facilitating the flow of information between County 
entities, outside organizations, and citizens.
c.
Developing and maintaining the IT Infrastructure at the Enterprise Level.
d.
Managing network security at the Enterprise Level.
e.
In conjunction with the Office of Procurement Services, coordinating enterprise vendor 
relationships and assisting departments in optimizing vendor performance.
f.
With the support/recommendations of the CIO Council, partnering with Human Resources in 
conducting IT salary market surveys.
g.
Representing the technology interests of the County to parties external to the County. (The 
Presiding Judge or designee represents such technology interests for the Judicial Branch.)
h.
Providing the County Manager and BOS with annual goals describing the infrastructure and 
operational plans for Enterprise Level information systems and technology.

Policy Number:
A1601
Policy Title:
INFORMATION TECHNOLOGY 
GOVERNANCE
Current Adoption Date:
MM-DD-2024
Page 5 of 7
i.
Providing technical advice and support to the County Manager and BOS; providing technology 
consulting services to departments or individuals on an as requested basis. 
j.
Making recommendations to County management for shared services and consolidated 
operations, e.g., GIS, data warehouses, data centers, etc.
k.
Reviewing technology related items at the request of the BOS.
l.
Convening select committees or oversight bodies to address Enterprise Level issues impacting 
project or fiscal technology Governance.
4.
CIO Council
The CIO Council is responsible for:
a.
Establishing a facilitating Department rotation and meeting cadence.
b.
Establishing the Countywide vision to leverage IT.
c.
Convening ad hoc committees to consider special issues and unique IT programs.
d.
Contributing to the County’s strategic vision.
e.
Enabling the Governance structure including: 
1)
developing Enterprise IT policy, standards, and directions, 
2)
facilitating standards which provide direction and overall lowest total cost of ownership, 
3)
promoting security principles and guidelines as established by the Chief Information Security 
Officer (CISO), and 
4)
developing and facilitating management of technology within the County Electronic 
Community tier.
f.
Encouraging funding models that facilitate infrastructure development and County Electronic 
Community partnerships.
g.
Facilitating:
 
1)
policies, standards, and guidelines,
2)
risk management,
3)
evaluation and adoption of technologies, and
4)
cross agency communications.
h.
When requested by Human Resources, collaborating on IT salary market surveys on positions 
to ensure that all appropriate positions are evaluated uniformly across Departments. 
i.
Collaborating on new technology products and services that may be leveraged for service 
transformation.
j.
Sharing partner assessments.

Policy Number:
A1601
Policy Title:
INFORMATION TECHNOLOGY 
GOVERNANCE
Current Adoption Date:
MM-DD-2024
Page 6 of 7
k.
Sharing departmental strategies and establishing common strategies.
l.
Promoting consistent and convenient delivery channels.
m. Enabling cross department synergy and service alignment.
n.
Identifying, developing, and recommending Enterprise Level policies, practices, and standards. 
5.
Appointing Authorities 
Appointing Authorities are responsible for:
a.
Collaborating with their Technology Officer. 
b.
Achieving benefits of technology deployment and producing IT services in a manner that is 
consistent with best industry practices and benchmarks.
c.
Jointly establishing County Electronic Communities that set direction for IT when more than one 
department must: 
1)
share horizontal processes, information, and systems,
2)
coordinate one or more projects (which may require appointment of an independent project 
coordinator).
d.
Ensuring departmental participation in CIO Council.
6.
Technology Officer
The Technology Officer at each level of the organization is responsible for:
a.
Engaging in practices to manage their technology environments within the framework of the 
principles established in this policy and other approved County policies and procedures. 
b.
Integrating new applications and systems into the common interfaces of the IT Infrastructure; 
adopting common data definitions and standards for all data shared with other Departments.
c.
Facilitating and controlling access to information according to security standards and in 
accordance with public records laws.
d.
Using industry best practices and standard benchmarks to measure IT performance.
e.
Leveraging shared services at the Enterprise, County Electronic Community, and Department 
levels whether insourced or outsourced technology.
f.
Utilizing a system development life cycle methodology to plan, implement, and maintain systems 
at the business unit level.
g.
Developing, maintaining, and testing plans for the recovery of information systems in response 
to a natural disaster, fire, or other event that would render a business facility or service 
inoperable.
h.
Protecting information assets against deliberate attack, sabotage, and unintentional or 
unauthorized alteration, destruction, or disclosure.

Policy Number:
A1601
Policy Title:
INFORMATION TECHNOLOGY 
GOVERNANCE
Current Adoption Date:
MM-DD-2024
Page 7 of 7
i.
Ensuring that their technology platforms meet the criteria of being proven, scalable, low cost, 
and well supported by the vendor; having a clearly defined short and long-range migration 
strategy.
j.
Participating with their County Electronic Community and the Enterprise to ensure timely and 
responsive integration of business systems and information based upon approved standards; 
Departments may be reviewed or audited for Community or Enterprise standards compliance.
k.
Assigning project coordinators when migrations affect or include more than one Department; the 
project coordinator will act as a liaison to all involved business and technology leaders and is 
responsible for the timely communication of impacts and related costs to other areas.
l.
Establishing appropriate departmental IT policies for their business operations and ensuring that 
their systems conform to policies set by their Department, Electronic Community, or the 
Enterprise, including approved record retention and disposition schedules.
7.
County Electronic Community
The County Electronic Community is responsible for:
a.
Acting upon direction from the CIO Council, Appointing Authorities, and Technology Officers.
b.
Drafting IT policy, strategy, priorities, plans, and standards. 
c.
Coordinating technology activities with County Electronic Community members as appropriate.
Revision History
Version
Revision Date
Description of Revision
1
08-1999
Initial version. Approved by County Manager
2
05-2001
Revision.
3
MM-DD-2024
Convert to BOS approved policy, add Application section, and clarify 
governance model, roles, and responsibilities.