The Office of the Inspector General performed an audit to determine if TVA manages access to nonpublic critical and sensitive information in accordance with TVA information management policy. Our scope was limited to TVA’s SharePoint® sites as of March 19, 2024. We determined TVA’s management of access to nonpublic critical and sensitive information could be improved. In addition, we determined TVA was not providing SharePoint® site owners with appropriate training to properly manage access to TVA nonpublic critical and sensitive information. This report, specifically identifies Microsoft, a nongovernmental organization/business entity. Pursuant to the James M. Inhofe National Defense Authorization Act for Fiscal Year 2023, Pub. L. No. 117-263 §5274, any such organization may submit a written response to the report within 30 days, clarifying or providing additional context for each instance within the report in which the organization is specifically identified. Any response provided for that purpose will be appended to the final, published report. If you have any questions about this process, please contact Jeffrey McKenzie at (865) 633-7374 or jtmckenzie@tvaoig.gov within 30 days of publication.
Report Date | Agency Reviewed / Investigated | Report Title | Type | Location | |
---|---|---|---|---|---|
Tennessee Valley Authority | SharePoint® Access Management | Audit | Agency-Wide | View Report | |
Social Security Administration | Security of the Business Services Online | Audit | Agency-Wide | View Report | |
U.S. Postal Service | Florida 1 District: Delivery Operations | Audit |
|
View Report | |
Department of Justice | Audit of the Federal Bureau of Prisons’ Inmate Financial Responsibility Program | Audit | Agency-Wide | View Report | |
Chemical Safety and Hazard Investigation Board | Compendium of Open and Unresolved Recommendations: Data as of May 31, 2024 | Other | Agency-Wide | View Report | |
U.S. Agency for International Development | Audit of Schedule of Expenditures of Engicon Co., Management Engineering Services Contract Phase II - Non-Revenue Water Project in Jordan, Contract 72027820C00002, January 1 to December 31, 2022 | Other |
|
View Report | |
U.S. Agency for International Development | Single Audit of Samaritan's Purse for the Year Ended December 31, 2021 | Other |
|
View Report | |
General Services Administration | Ineffective Oversight of a Contract for Basic Repairs and Alterations to the William Augustus Bootle Federal Building and U.S. Courthouse Increased the Risk of 8(a) Program Small Business Fraud and Abuse | Other | Agency-Wide | View Report | |
General Services Administration | GSA Should Strengthen the Security of Its Robotic Process Automation Program | Audit | Agency-Wide | View Report | |
Internal Revenue Service | Employee Safety and Physical Security Review of the **********8********** Taxpayer Assistance Center and Tax Compliance Office | Inspection / Evaluation | Agency-Wide | View Report | |