Cal. Government Code § 8546.10

(a) The California State Auditor may establish a high-risk local government agency audit program for the purpose of identifying, auditing, and issuing reports on any local government agency, including, but not limited to, any city, county, special district, or any publicly created entity, whether created by the California Constitution or otherwise, that the California State Auditor identifies as being at high risk for the potential of waste, fraud, abuse, or mismanagement or that has major challenges associated with its economy, efficiency, or effectiveness. (b) In addition to identifying a local government agency as high risk on the basis of weaknesses identified in audit and investigative reports produced by the office, the California State Auditor may review publicly available information and consult with the Controller, Attorney General, and other state agencies that have oversight responsibilities over any local government agency, in identifying local governments that are at high risk. (c) The California State Auditor’s Office shall be responsible for the state costs associated with the high-risk local government agency audit program, shall conduct the program as funds permit, and shall only conduct the program to the extent that it does not interfere with duties related to mandated audits and requests from the Joint Legislative Audit Committee. (d) (1) The California State Auditor shall notify the Joint Legislative Audit Committee whenever he or she identifies a local government as at high risk. (2) The California State Auditor shall provide the Joint Legislative Audit Committee, at a public hearing of the committee, an annual update of all audits in progress. (3) If a local government agency has taken significant corrective measures for deficiencies identified by the California State Auditor, that agency shall be removed from the high-risk local government agency audit program. (e) Notwithstanding the requirements of Section 10231.5, if the California State Auditor establishes the program provided for in this section and the California State Auditor determines that a local government agency is at high risk, the California State Auditor shall issue audit reports at least once every three years with recommendations for improvement in the local government so identified. (f) Audits conducted pursuant to this section shall be approved by the Joint Legislative Audit Committee. (g) (1) The California State Auditor may conduct an initial assessment at a local government agency prior to conducting an audit, during which he or she may gather any publicly available information from a local government agency and any additional information, including any interviews, that the local government agency is willing to provide, for the purpose of identifying whether or not it is a high-risk local government agency. (2) Before beginning an initial assessment at a local government agency, the California State Auditor shall notify the Joint Legislative Audit Committee in writing which local government agency will be assessed.