Federal Reports

The Office of the Inspector General audited the adequacy of the Tennessee Valley Authority's (TVA) process to surplus and dispose of information technology (IT) equipment due to the risk of (1) protected information disclosure and (2) environmental compliance and regulatory compliance violations associated with the surplus and disposal of IT equipment. We found weaknesses with TVA's policies, procedures, and process to surplus and dispose of IT equipment, including (1) surplus IT equipment was not properly sanitized, tracked, and processed; (2) badge access control reviews of areas holding surplus IT equipment were not being performed as required by policy; and (3) processes for the surplus and disposal of cathode ray tubes do not address environmental regulations to prevent release of the lead into the environment. TVA management agreed with our findings and recommendations.

OIG administers the Medicaid Fraud Control Unit (MFCU or Unit) grant awards, annually recertifies the Units, and oversees the Units' performance in accordance with the requirements of the grant. As part of this oversight, OIG conducts periodic reviews of all Units and prepares public reports based on these reviews. These reviews assess the Units' adherence to the 12 MFCU performance standards and compliance with applicable Federal statutes and regulations.

An insider threat program helps an organization prevent, detect, and respond to the threat of an employee, contractor, or business partner misusing their trusted access to computer systems and data. Threats to the U.S. Postal Service include the theft and disclosure of sensitive, proprietary, or national security information, and the sabotage of its computer systems or data. Our objective was to determine if the Postal Service has established and implemented an effective insider threat program in accordance with Postal Service policies and best practices.