Federal Reports

The Office of the Inspector General audited TVA’s controls in place to prevent, detect, and respond to ransomware incidents. In summary, we found TVA management generally has appropriate controls in place to prevent, detect, and respond to a ransomware incident. However, for one selected system, we found inappropriate administrative access. To strengthen access controls, TVA currently has an ongoing project to identify, track, and monitor administrative accounts, which is expected to be complete in 2020. In addition, we found improvements were needed in the Ransomware Incident Action Plan. TVA’s Cybersecurity updated the Ransomware Incident Action Plan during our audit.

This management alert presents the results of our review of Inbound International Mail Operations – [Redacted] and nearby offsite facilities. We are issuing this alert to facilitate immediate corrective actions regarding the U.S. Postal Service’s ability to fulfill the U.S. Customs and Border Protection’s advanced electronic data-based holds for inbound international mail. These issues present potential public safety and security concerns to the U.S. Postal Service, its employees, and the general public.