The Office of the Inspector General audited the effectiveness of TVA’s phishing training provided to TVA users and determined that it was ineffective. In addition, we found TVA does not have formal procedures for conducting periodic phishing exercises, follow-up training for users who failed the periodic exercises, or consequences for users who fail to take the required phishing training. TVA management agreed with our findings and recommendations.
Report File
Date Issued
Submitting OIG
Tennessee Valley Authority OIG
Other Participating OIGs
Tennessee Valley Authority OIG
Agencies Reviewed/Investigated
Tennessee Valley Authority
Report Number
2019-15621
Report Description
Report Type
Audit
Agency Wide
Yes
Number of Recommendations
3
Questioned Costs
$0
Funds for Better Use
$0