Federal Reports

The OIG audited the handling and processing of personally identifiable information (PII) provided to Cartus Corporation, a contractor for TVA. Our audit evaluated the (1) processes used to safeguard data transmitted from TVA to Cartus (2) handling, processing, and security of the data at Cartus, and (3) compliance with security-related contract terms. Generally, we found TVA controls for transmission of data to Cartus and its security controls for TVA data stored on its systems were effective in protecting the data. However, we identified control improvements that, if implemented, would strengthen Cartus' controls over data protection. Summary Only

The report presents the results of the audit of the Commission's financial statements for the fiscal year

The audit objectives were to determine whether program funds were managed in accordance with the ARC and Federal grant requirements

We reviewed the TVA compliance with the Federal Information Security Management Act (FISMA) of 2002. In summary, we determined that while TVA has made some progress in implementing information technology controls required by FISMA and work on some previously recommended actions continues, additional efforts were needed to strengthen compliance of TVA's security program with existing controls and address additional concerns. We identified opportunities to improve all control areas that we reviewed, except for TVA programs for incident response and reporting and remote access management. In addition, we identified an opportunity for TVA to improve agency-wide security oversight. TVA management agreed with our recommendations. Summary Only

The OIG audited the electric system of Volunteer Energy Cooperative (Volunteer), a distributor based in Decatur, Tennessee. The objective of the audit was to determine compliance with provisions of the power contract between TVA and Volunteer for the period July 2008 through June 2010. For fiscal year (FY) 2010, Volunteer provided power to approximately 110,000 customers resulting in electric sales revenue of approximately $200 million. During the period audited, Volunteer also operated a natural gas division and a wholly owned propane subsidiary.Our audit found Volunteer generally complied with the contract provisions for (1) proper reporting of electric sales and (2) nondiscrimination in providing power. However, we noted instances of noncompliance with other provisions of the power contract. The most important instances were related to the use of electric system revenues and customer classification. We also identified three areas where TVA oversight of distributors could be enhanced. Two areas identified were new oversight issues addressing the lack of (1) guidance related to the due diligence process for cooperatives providing loans to customers from funds provided by Rural Development and (2) review of cooperative distributors' capital credit allocations in the retail rate setting process. The remaining issue, regarding the lack of a current joint cost study, was reported in previous OIG distributor audit reports, and TVA agreed to take corrective action on this issue.With regard to the 18 recommendations related to Volunteer, Volunteer disagreed with three recommendations, but TVA management agreed with all of the recommendations, stating it planned to investigate one finding further. In regards to the recommendations which were specific to TVA, TVA management stated (1) it planned to recommend formal approval by the TVA Board of Directors of a use of revenues policy which expressly approved distributor participation in the United States Department of Agriculture Rural Economic Development and Grant Program, and (2) consideration of Volunteer's capital credit allocations was inherent in TVA's revised retail ratemaking and approval process.