Submitting OIG:
Report Description:
The Office of the Inspector General audited cyber security of the Tennessee Valley Authority's (TVA) gas secure rooms that provide remote logical access to all TVA gas fired plants. We found the architecture, current standard programs and processes, and draft standard operating procedures contain appropriate information as suggested by best practices. However, we found the logical controls for the gas secure rooms could be strengthened. Specifically, we found issues with the (1) network devices at the gas secure rooms and a sample of combined cycle and combustion turbine plants and (2) workstations and servers at the gas secure rooms. Additionally, we found the gas secure rooms were not being used for access as originally intended. TVA management agreed with our findings and recommendations.
Short / Alternative Report Title:
Gas Secure Room Cyber Security
Date Issued:
Monday, August 28, 2017
Agency Reviewed / Investigated:
Submitting OIG-Specific Report Number:
2017-15452
Location(s):
Agency-Wide
Type of Report:
Audit
Questioned Costs:
$0
Funds for Better Use:
$0
Number of Recommendations:
7
View Document:
Attachment | Size |
---|---|
2017-15452.pdf | 611.14 KB |