Reports

The Office of the Inspector General audited the Tennessee Valley Authority’s (TVA) use of remote application and desktop virtualization client due to the risks of (1) potential system intrusion through misconfigurations and (2) continued elevated remote users during the COVID-19 pandemic. We found the configuration management control for TVA’s remote application desktop virtualization client was ineffective. However, we determined compensating access controls were in place to mitigate the risk to an overall acceptable level.

As part of our fiscal compliance audit of the Department of General Services – Office of State Procurement (OSP) for the period beginning October 16, 2018 and ending October 31, 2021, we found that OSP did not always conduct emergency procurements in compliance with State procurement regulations during the COVID-19 pandemic. Our test of four emergency procurements for commodities and information technology services valued at $54.9 million awarded between March 2020 and May 2021 disclosed that OSP could not provide documentation of the basis for the purchases (such as justification for the use...

The questioned costs on this report is sensitive information.