In a prior audit, 2007-10997, Review of Temporary Shares for Sensitive Information, the OIG identified numerous incidents of Personally Identifiable Information (PII) and TVA sensitive information on temporary shares available to anyone with a TVA network ID. TVA's Information Services (IS) organization subsequently reviewed other temporary shares and identified additional instances of PII available on the shares. For this audit, we (1) reviewed the risk assessment methodology used to evaluate PII identified during the reviews of temporary shares and (2) determined if IS' conclusions regarding risk exposure of PII were reasonable. In summary, we found the (1) risk assessment methodology was consistent with the National Institute of Standards and Technology's and Office of Management and Budget's guidance, and (2) conclusions reached were reasonable.
Report Date | Agency Reviewed / Investigated | Report Title | Type | Location | |
---|---|---|---|---|---|
Tennessee Valley Authority | Review of Risk Assessment Performed on Personally Identifiable Information | Audit | Agency-Wide | View Report | |
U.S. Capitol Police | Night Differential Pay for Civilian Employees | Audit | Agency-Wide | View Report | |
Election Assistance Commission | Administration of Payments Received Under the Help America Vote Act by the State of Washington Secretary of State | Audit |
|
View Report | |
Department of the Treasury | Audit of the Department of the Treasury's Special-Purpose Financial Statements for Fiscal Years 2007 and 2006 | Audit | Agency-Wide | View Report | |
Department of the Treasury | Report on Community Development Financial Institutions Fund's Fiscal Years 2007 and 2006 Financial Statements | Audit | Agency-Wide | View Report | |
Nuclear Regulatory Commission | Independent Auditors' Report on the U.S. Nuclear Regulatory Commission's Special-Purpose Financial Statements as of September 30, 2007, and 2006, and For the Years Then Ended | Audit | Agency-Wide | View Report | |
Department of the Treasury | Audit of the Financial Management Service's Fiscal Years 2007 and 2006 Schedules of Non-Entity Government-Wide | Audit | Agency-Wide | View Report | |
Department of the Treasury | Audit of the Department of the Treasury's Fiscal Years 2007 and 2006 Financial Statements | Audit | Agency-Wide | View Report | |
AmeriCorps | Audit of the Corporation for National and Community Service’s Fiscal Year 2007 Financial Statements | Audit | Agency-Wide | View Report | |
AmeriCorps | Audit of the Corporation for National and Community Service’s Fiscal Year 2007 National Service Trust Schedules | Audit | Agency-Wide | View Report | |