Cyber security risk management at the Southeastern, Southwestern, and Western Area Power administrators

Original publisher: [Washington, D.C.] : U.S. Dept. of Energy, Office of Inspector General, Office of Audit Services, [2008] OCLC Number: (OCoLC)712775562 Excerpt: ... Appendix 1 ( continued ) Performance and Results Act of 1993 relevant to security over information systems. We found that Southwestern had established measures specific to this area, while the other two PMAs had not. We did not rely on computer-processed data to satisfy our audit objective. An exit conference was held with Southeastern on November 12, 2008. Western and Southwestern waived an exit conference. ________________________________________________________________ Page 11 Objective, Scope, and Methodology