Emergency Preparedness – Active Shooter

We included an audit of the Tennessee Valley Authority’s (TVA) plans for an active shooter incident in our annual audit plan due to the potential risk of an active shooter incident occurring. Our audit objective was to determine if TVA has adequate plans in place to prevent, prepare for, and manage active shooter incidents. The audit scope included all program documentation and records that support TVA's plans to prevent, prepare for, and manage active shooter incidents as of May 13, 2020. We compared TVA’s procedures around preventing, preparing for, and managing active shooter incidents to best practices recommended by the Department of Homeland Security (DHS). DHS best practices include four steps (Connect, Plan, Train, and Report) to apply in advance of an incident or attack. We found TVA has plans in place to prevent, prepare for, and manage active shooter incidents that include steps to address the connecting and planning phases of DHS recommendations to prepare for active shooter incidents. However, we found the training and reporting steps need improvement. Specifically, we found TVA’s Active Threat Awareness program training is not mandatory and less than 10 percent of TVA’s employees have taken the training. In addition, portions of best practices related to active threat awareness are included in at least ten TVA Standard Programs and Processes rather than a single document and are not easily accessible by employees. TVA management agreed with our findings and recommendations.