California Code, Government Code - GOV § 8546.10

(a) The California State Auditor may establish a high-risk local government agency audit program for the purpose of identifying, auditing, and issuing reports on any local government agency, including, but not limited to, any city, county, special district, or any publicly created entity, whether created by the California Constitution or otherwise, that the California State Auditor identifies as being at high risk for the potential of waste, fraud, abuse, or mismanagement or that has major challenges associated with its economy, efficiency, or effectiveness.

(b) In addition to identifying a local government agency as high risk on the basis of weaknesses identified in audit and investigative reports produced by the office, the California State Auditor may review publicly available information and consult with the Controller, Attorney General, and other state agencies that have oversight responsibilities over any local government agency, in identifying local governments that are at high risk.

(c) The California State Auditor's Office shall be responsible for the state costs associated with the high-risk local government agency audit program, shall conduct the program as funds permit, and shall only conduct the program to the extent that it does not interfere with duties related to mandated audits and requests from the Joint Legislative Audit Committee.

(e) Notwithstanding the requirements of Section 10231.5, if the California State Auditor establishes the program provided for in this section and the California State Auditor determines that a local government agency is at high risk, the California State Auditor shall issue audit reports at least once every three years with recommendations for improvement in the local government so identified.

(f) Audits conducted pursuant to this section shall be approved by the Joint Legislative Audit Committee.