TVA’s Identity and Access Management Project

The Office of the Inspector General audited the effectiveness of the Tennessee Valley Authority’s (TVA) implementation of a new identity and access management (IAM) solution. We found the TVA project team has effectively implemented the IAM program and related projects. TVA expanded the IAM program to include additional user access management tools and processes, which included privileged identity management. We identified documentation concerns regarding privileged identity management that were (1) communicated to the project management team during the audit and (2) addressed by TVA management prior to completion of rollout.