235 



ENCLOSURE VI ENCLOSURE VI 



ADMINISTRATIVE MATTERS 



BACKGROUND 



In 1983, we issued several reports on the management by the 

 Bonneville Power Administration (BPA) of its automatic data 

 processing systems development activities. These reviews were, 

 based, in part, on our 1978 review of BPA's management of automatic 

 data processing systems development activities and on a 1981 audit 

 conducted by the Department of Energy. 



GAP WORK 



In March 1983, we reviewed computer security at BPA's 

 control system computer center. We found that BPA had made strides 

 in implementing a computer security program but that more could be 

 done. Identified weaknesses included lack of written computer 

 security procedures, inadequate site security, and lack of 'a fully 

 developed contingency plan in the event of a computer failure. We 

 recommended that BPA develop an action plan to correct these 

 weaknesses and that the Chief Auditor periodically review the 

 computer center's security program. BPA took corrective action in 

 response to our recommendations . 



Our February 1983 report reviewed BPA's electricity billing 

 processes to assess the actions planned by BPA to improve the 

 timeliness of its billings. We found that more than $3.2 million 

 in interest expenses could be avoided annually if BPA were to 

 change its customer billing processes. Specifically, BPA could 

 achieve significant savings by (1) charging certain customers 

 monthly rather than quarterly and (2) requiring federal agency 

 customers to pay their bills promptly or be charged interest on 

 late payments. 



19 GAO/RCED-93-133R, GAO Products on Bonneville Power Administration 



