TVA Enterprise Risk Management

Since the Office of the Inspector General's previous review of TVA's risk program in 2003, TVA has enhanced its Enterprise Risk Management (ERM) capabilities in the following areas: risk identification and assessment; management tone; strategic decision-making support; commitment to ERM staffing; and promotion of an ERM culture. The areas in need of improvement include: linking risks and objectives to effectively identify and prioritize risks, focus discussions, and allocate resources; clearer mapping of likelihood and severity with associated risk; measurement of inherent risk to identify critical risks with a higher need for monitoring; role of the Board and executive management in defining risk tolerance which is policy driven; a formal, comprehensive risk policy approved by the Council and Board; and increased reporting and discussions of ERM with the Board. We recommended TVA address the areas needing improvement. Management generally agreed and is taking or plans to take appropriate action.