Information Systems Categorization Process
The Office of the Inspector General audited TVA’s information systems categorization process to determine if TVA’s information systems categorization process was effective and in compliance with Federal Information Processing Standards Publication 199 and National Institute of Standards and Technology Special Publication (NIST SP) 800-60. We determined that portions of TVA’s process were effective. However, we found gaps with implementing NIST SP 800-60 guidance. TVA management agreed with our findings and recommendations.