All Reports

The Office of the Inspector General audited the adequacy of the Tennessee Valley Authority's (TVA) process to surplus and dispose of information technology (IT) equipment due to the risk of (1) protected information disclosure and (2) environmental compliance and regulatory compliance violations associated with the surplus and disposal of IT equipment.

The Tennessee Valley Authority (TVA) Standard Programs and Processes (SPP) 04.021, TVA Inventory Management Process, defines "surplus" as material that is not expected to be used within the next 3 years by TVA. Due to the risk of disposing of needed materials, and as a result of employee concerns shared during organizational effectiveness reviews at Cumberland and Kingston Fossil Plants in 2015, we initiated an evaluation of TVA's coal plant surplus materials process.

At the request of the Tennessee Valley Authority's (TVA) Supply Chain, we examined the cost proposal submitted by a company for civil projects and coal combustion residual program management work at TVA's steam electric power plants.

The Office of the Inspector General conducted an evaluation of Safety and Performance Improvement (SPI) to identify strengths and risks that could impact SPI's organizational effectiveness. Our evaluation identified strengths within SPI related to (1) organizational alignment, (2) customer focus, (3) management support of employees, (4) employee teamwork and collaboration, and (5) proactive identification of safety risk behaviors. However, we identified issues that, if left unresolved, could increase the risk that SPI will be unable to effectively meet its objective in the future.

Due to concerns identified in a prior review related to the length of time Transmission and Power Supply (TPS) direct charge materials had been stored at the Muscle Shoals Distribution Center (MSDC), we initiated an evaluation to determine if TPS direct charge materials were being managed appropriately.

TVA's Nuclear Quality Assurance (QA) provides monitoring and assessment of plant activities to ensure they are conducted in a quality manner. Periodically, reviews are performed (internal and external) of QA that identify improvement opportunities. Due to the importance of QA's role in monitoring and assessing nuclear plant activities, we initiated an evaluation to determine if QA has taken actions to address issues identified during the internal and external reviews. We determined QA generally took actions to address issues identified during reviews of QA.

As part of our annual audit plan, we audited costs billed to the Tennessee Valley Authority (TVA) by Williams Plant Services, LLC (WPS) for providing facilities maintenance services and technical support services for Bellefonte Nuclear Plant under Contract No. 4067. Our audit included $23.9 million in costs paid by TVA between January 1, 2013, and August 31, 2015. Our audit objective was to determine if the costs WPS billed to TVA were in accordance with the terms of Contract No. 4067.

The Office of the Inspector General audited cyber security of the Tennessee Valley Authority's (TVA) gas secure rooms that provide remote logical access to all TVA gas fired plants. We found the architecture, current standard programs and processes, and draft standard operating procedures contain appropriate information as suggested by best practices. However, we found the logical controls for the gas secure rooms could be strengthened.

The Office of the Inspector General conducted a review of Talent Acquisition and Diversity (TAD) to identify strengths and risks that could impact TAD's organizational effectiveness. Our evaluation identified strengths within TAD related to (1) organizational alignment, (2) collaboration, (3) support from TAD management, and (4) department morale and ethics. However, we also identified potential risks that could negatively affect the achievement of the mission.

The Office of the Inspector General audited Tennessee Valley Authority (TVA) Internet-accessible Web sites to identify cyber security weaknesses through penetration testing. In summary, 37 Internet-accessible Web sites were tested, and 7 high risk vulnerabilities were identified. Two of the high risk vulnerabilities that were identified require additional testing by TVA's Information Technology for confirmation. TVA management agreed with our findings and recommendations.