As part of our annual audit planning, we completed a threat assessment to identify high risk cybersecurity threats that could potentially impact Tennessee Valley Authority (TVA). We determined the potential impact for system intrusion through misconfigurations or unpatched systems to be high. Therefore, we included an audit of TVA Transmission Operations and Power Supply (TOPS) organization’s management of Mac® desktops and laptops as part of our 2022 audit plan. In summary, we determined MacBooks® managed by TOPS followed TVA’s configuration management policy. However, we determined 3 of 15 MacBooks® did not follow TVA policy for patch management. Specifically, one MacBook® was obsolete, and two had inconsistent patching history. In addition, we identified a gap between TVA policy and a TOPS patch management work instruction. TVA management agreed with our findings and took action to (1) surplus one MacBook® we identified as obsolete and (2) update the TOPS work instruction to align with TVA policy.
| Report Date | Agency Reviewed / Investigated | Report Title | Type | Location | |
|---|---|---|---|---|---|
| Tennessee Valley Authority | Transmission and Power Supply’s Management of Mac® Desktops and Laptops | Audit | Agency-Wide | View Report | |
| U.S. Postal Service | Contract Authoring Management System Utilization and Controls | Audit | Agency-Wide | View Report | |
| Department of Health & Human Services | Adverse Events Toolkit: Medical Record Review Methodology | Inspection / Evaluation | Agency-Wide | View Report | |
| Office of Personnel Management | Investigative Activities Quarterly Case Summary FY 2023 Q3 | Other | Agency-Wide | View Report | |
| U.S. Agency for International Development | Performance Audit of Incurred Costs for Development Innovations Group, LLC, for Fiscal Year 2019 | Other |
|
View Report | |
| U.S. Agency for International Development | Operation Inherent Resolve Lead Inspector General Quarterly Report to Congress April 1, 2023 to June 30, 2023 | Other | Agency-Wide | View Report | |
| Federal Deposit Insurance Corporation | DOJ Press Release: Former Atlanta business-owner sentenced to prison for obtaining millions of dollars in COVID-19 relief fraud, tax identity theft and credit card fraud | Investigation | Agency-Wide | View Report | |
| Corporation for Public Broadcasting | Evaluation of KCCU-FM, Cameron University, Compliance with Selected Communications Act, Diversity and Transparency Requirements, Report No. ECR2309-2309 | Inspection / Evaluation |
|
View Report | |
| Pension Benefit Guaranty Corporation | Audit of PBGC’s Review of Initial Special Financial Assistance Applications | Audit | Agency-Wide | View Report | |
| Department of the Interior | Summary: Alleged Ethics Violations by a Bureau Director Unsubstantiated | Investigation | Agency-Wide | View Report | |
