Maximo Vendor Master File

The Office of the Inspector General included an audit of TVA’s Maximo vendor master file in our annual audit plan due to the risk of improper payments associated with the large amount of payments processed annually using Maximo data. Our audit objective was to determine if TVA’s Maximo vendor master file is properly maintained according to best practices and Supply Chain Standard Programs and Processes 04.014, Supplier Maintenance. Our audit scope included the data in TVA’s Maximo vendor master file as of November 20, 2019.In summary, we found no significant instances of noncompliance with TVA’s Standard Programs and Processes, but did note that best practices were not consistently followed for maintenance of the vendor master file. Specifically, we found (1) Maximo does not log changes to the vendor master file, (2) instances where vendor addresses match employee addresses, (3) duplicate vendors, (4) vendors are not deactivated in a timely manner, (5) no minimum requirements for vendor record data, and (6) vendors with no physical address.