Physical and Logical Network Architecture - Hydroelectric

The OIG audited the hydroelectric dam network architecture at a TVA facility to identify security zones and perimeters and analyze network devices and the physical infrastructure for compliance with policies, procedures, and best practices. We found TVA has used proven best practices in the design of the physical and wireless corporate networks, as well as the control network. These networks were architected appropriately and the cable plant was installed in a neat and organized manner. However, we found one corporate network switch was physically unsecure and another lacked a remote access list which would reduce the risk of inappropriate access. (Summary Only)