Federal Reports

This report provides the results of our review of the Centers for Disease Control and Prevention (CDC) detailed accounting submission, which includes the Table of Drug Control Obligations, related disclosures, and management's assertions for the fiscal year ended September 30, 2016. We also reviewed the Performance Summary Report, which includes management's assertions and related performance information for the fiscal year ended September 30, 2016.

TARP’s Hardest Hit Fund is an investment in American workers, providing a temporary safety net to help save the homes of unemployed and underemployed working class Americans in Rust Belt states (such as Ohio, Michigan, Indiana and Illinois), Southern states (such as North Carolina, South Carolina, Alabama, Tennessee, and Georgia), and 10 other states.HHF has helped more than a quarter of a million homeowners, but even good programs can be better. The program is meeting a real need, one that continues. The need for this unemployment bridge—and other Hardest Hit Fund programs, like blight demolition—remains so critical that, in December 2015, Members of Congress from Ohio and Michigan worked across the aisle to convince Congress to add $2 billion to the program.Hardest Hit Fund dollars have been slow to flow in many states, and more than 160,000 people were denied HHF assistance. SIGTARP analyzed data provided by state agencies on each person who was turned down for this program.

Emphasis on older grants with no reported expenditures or small balances

The OIG analyzed the metrics and associated maturity levels defined within the Fiscal Year (FY) 2016 Inspectors General (IG) Federal Information Security Modernization Act of 2014 (FISMA) Reporting Metrics and found TVA's maturity levels for the five cybersecurity functional areas ranged from level 1, ad hoc, to level 3, consistently implemented. The Chief Information Officer (CIO), Information Technology ( IT), in consultation with TVA executive management, will continue to be responsible for determining the desired level of maturity to achieve in each of the five functional areas, and actions necessary to reach the desired maturity level, while considering efficiency and budgeting constraints. The OIG will continue to reassess progress and TVA status on an annual basis as prescribed by the Office of Management and Budget and the Department of Homeland Security, utilizing the annual IG metrics and maturity models prescribed by the Council of Inspectors General on Integrity and Efficiency. We recommended the CIO, IT, perform a risk assessment of the FY 2016 IG metrics not met and determine actions necessary to reduce cybersecurity risk to TVA in FY 2017.(Summary Only)