Active Projects
{{number}} projects identified for {{city}}
Cybersecurity Vulnerability Remediation & Compliance
Cybersecurity Compliance · IT Modernization
High Priority
About this project
A January 2025 OIG audit identified missed CISA remediation for 8 of 22 Known Exploited Vulnerabilities and a failed IP inventory update, creating active deficiencies under CISA BOD 19-02/22-01. Additional endpoint and credential management gaps compound operational and compliance risk across the organization.
The opportunity
The January 2025 audit finding creates immediate, time-sensitive pressure to remediate compliance gaps before they escalate into broader operational or regulatory consequences. Strong enterprise financial health and ongoing investment in security and resilience provide a favorable funding environment to advance remediation within the current planning cycle.
Sourcewell
Discuss this project →Endpoint & Identity Security Modernization
IT Modernization · Cybersecurity Compliance
High Priority
About this project
A January 2025 OIG audit identified missed CISA-mandated vulnerability remediations and a failed IP inventory update, exposing critical gaps in endpoint visibility and identity access management. Open compliance obligations under CISA BOD 19-02 and BOD 22-01 elevate operational and regulatory risk across the enterprise.
The opportunity
Declared IT modernization and cybersecurity strategic initiatives signal active organizational readiness and a receptive budget environment. Addressing endpoint and identity gaps now aligns with current compliance deadlines, reduces audit exposure, and supports responsible stewardship of public infrastructure security.
Sourcewell
Discuss this project →Unify Emergency Management & Mass Notification Systems
Emergency Management · Public Safety
High Priority
About this project
TVA Police operates a fragmented, multi-platform public warning environment with an Emergency Preparedness Score of 2, unknown EOP review status, and unresolved coordination gaps across dispatch and EOC operations. This split notification ecosystem creates measurable risk to response effectiveness and operational continuity during critical incidents.
The opportunity
Consolidating to a unified emergency management and mass notification platform is a stated leadership priority, and cooperative purchasing vehicles are available to streamline procurement within the current planning cycle. Acting now reduces operational risk, closes documented preparedness gaps, and positions the agency for stronger EOC coordination and public alerting outcomes.
Sourcewell
Discuss this project →Web Accessibility & Digital Compliance Remediation
Digital Accessibility · Regulatory Compliance
High Priority
About this project
The organization's public-facing web presence currently lacks a formal WCAG conformance declaration, creating an ongoing legal and accessibility compliance gap. Without documented conformance, the organization remains exposed to civil rights risk and potential enforcement action under federal accessibility standards.
The opportunity
Proactively addressing accessibility conformance reduces legal exposure and aligns with broader digital modernization priorities already underway. Staging this as a near-term initiative supports responsible stewardship of public trust and positions the organization ahead of potential regulatory scrutiny.