Physical and Environmental Controls for TVA's Data Centers

We reviewed the physical and environmental controls at two of TVA's data centers to determine the adequacy of (1) physical controls to ensure only authorized access to system resources and (2) environmental controls to appropriately protect computing assets from hazards. We determined both data centers' physical access controls and one data center's environmental controls need improvement. TVA management agreed with the findings and initiated or plans to initiate corrective actions needed to implement our recommendations. Summary Only