Reports

The audit found the agency had significant issues implementing the Coronavirus Aid, Relief, and Economic Security (CARES) Act. The agency did not sufficiently review CARES invoices due to changing guidelines, reduced contract oversight staffing during the pandemic, overreliance on contractor-provided information, and the lack of clear and comprehensive Contracting Officer Representative (COR) oversight procedures for CARES invoices. As a result, the OIG questioned more than $16.4 million, or 40 percent of the sampled CARES invoice charges. As of June 8, 2021, NSA reported $917 million in CARES...

The Office of the Inspector General OIG audited the Tennessee Valley Authority’s (TVA) use of remote application and desktop virtualization due to the risk of increased remote users during the COVID-19 pandemic and recent publicized remote access vulnerabilities. We found several areas where TVA was consistent with cybersecurity remote access best practices. However, we identified gaps in TVA’s configuration settings, architectural design, and administrative procedures. We recommend the Vice President and Chief Information and Digital Officer, Technology & Information, review the identified...