Federal Reports

The Federal Information Security Modernization Act of 2014 (FISMA) requires each agency’s Inspector General (IG) to conduct an annual independent evaluation to determine the effectiveness of the information security program (ISP) and practices of its respective agency. Our objective was to determine the effectiveness of the Tennessee Valley Authority’s (TVA) ISP and practices as defined by the FY 2023 – 2024 IG FISMA Reporting Metrics. Our audit scope was limited to answering the fiscal year (FY) 2024 IG metrics, which include 20 core IG metrics and 17 supplemental IG metrics. The FISMA methodology considers metrics at a level 4 (managed and measurable) or higher to be at an effective level of security. Based on our analysis of the FY 2024 IG metrics and associated maturity models, we determined TVA's ISP and practices were operating in an effective manner as defined by the FY 2023 – 2024 IG FISMA Reporting Metrics. However, we identified areas for improvement in both the core and supplemental metrics to further improve TVA’s ISP and practices.

We found that the Person in Charge failed to stop a pollution event, ordered platform operators to lie to BSEE inspectors, and falsified inspection logs.

To see our report, click on the link below

This report presents the results of our audit of Mail Theft Mitigation and Response at the Parkside Station, Rincon Finance Center Station, and Townsend Carrier Annex Station in San Francisco, CA. The stations are in the California 1 District of the Retail and Delivery Operations, Western- Pacific Area. Our objective was to assess the U.S. Postal Service’s actions taken to mitigate and respond to mail theft in San Francisco, CA.

The audit objectives were to determine whether program funds were managed in accordance with the ARC and Federal grant requirements.