Open Recommendations

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

We recommend the Senior Vice President, Generation Projects and Fleet Services, take action to ensure project managers include all required parties on current and future major projects.

We recommend the Senior Vice President, Generation Projects and Fleet Services, work with Tennessee Valley Authority’s Cybersecurity organization to assess the Cumberland Energy Solution project for other potential cybersecurity risks.

We recommend the Vice President, Supply Chain, evaluate its Trade Agreements Act compliance process and make changes as needed to improve compliance.

We recommend the Senior Vice President, Generation Projects and Fleet Services, in conjunction with the Vice President, Supply Chain • Evaluate alternative contracting strategies for major projects. • Take steps to determine the reasonableness of fixed prices and project change requests.

We recommend the Vice President and Chief Information and Digital Officer, Technology and Innovation, perform a risk assessment of SharePoint® access management to identify additional controls to mitigate inappropriate access to nonpublic critical and sensitive information.

We recommend the Vice President and Chief Information and Digital Officer, Technology and Innovation, update TVA’s SharePoint® training to provide site owners with the knowledge they need to properly protect TVA nonpublic critical and sensitive information.

The Chief Information Officer should re-establish the Technology Retirement Office or implement a similar enterprise-wide program to identify, prioritize, and decommission legacy systems.

In coordination with the Department of Justice (Department), continue to support implementation of the Final Rule by advancing counsel and responding expediently to requests for information that are routed to the BOP from various stakeholders.

We recommend that USAID/Kenya and East Africa determine the allowability of the $128,405 in ineligible questioned costs on page 20 of the audit report and recover any amount that is unallowable.

We recommend that USAID/Kenya and East Africa verify that Liverpool Voluntary Care and Treatment Health corrects the two instances of material noncompliance detailed on pages 45 to 46, and 48 of the audit report.

We recommend that USAID/Kenya and East Africa verify that Liverpool Voluntary Care and Treatment Health provides University Research Company International and FHI360 with a copy of the findings raised in Ernst & Young LLP's audit report for their review (a) to determine the allowability of any ineligible questioned costs identified on page 20 of the audit report pertaining to their particular subawards; and (b) to take any corrective actions regarding the instances of material noncompliance related to the subawards detailed on pages 42 to 46 of the report.

We recommend that USAID/Southern Africa verify that Anova Health Institute NPC corrects the one instance of material noncompliance detailed on pages 52 to 53 of the audit report.

Improve or enhance its antifraud efforts for the ESG program and incorporate fraud risk management practices that are consistent with the best practices identified in the Government Accountability Office's A Framework for Managing Fraud Risks in Federal Programs and Chief Financial Officers Council and Treasury Bureau of the Fiscal Services' Antifraud Playbook.

Obtain training or technical assistance as needed on the implementation of fraud risk management practices.

Develop a plan of action and milestones for revising the trailer utilization-calculated percentages in Surface Visibility to account for stacked containers and cubic feet.