GreatNorthCollective/greatnorth-us-federal-ai-inventory-2024 huggingface dataset:
2_use_case_name: ArcGIS
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: GIS
8_topic_area: Energy & the Environment
10_commercial_ai: Creating visual representations of data sets for reports and presentations using AI.
11_purpose_benefits: Platform for mapping, analyzing, managing, and viewing geospatial data. It is designed to support and integrate with a variety of GIS services, providing a robust solution for organizations to leverage spatial information.
12_outputs: Maps, spatial analysis, image processing and image analysis
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 4/17/2023
19_date_acq_dev_began: 6/10/2023
20_date_implemented: 7/27/2023
22_dev_method: Developed with both contracting and in-house resources.
24_hisp_support: No
28_iqa_compliance: Data quality and model quality checks
29_contains_pii: No
31_data_catalog: Yes
33_agency_data: GIS data, ESRI, image data, Maximo data
34_data_docs: Documentation is complete: Documentation exists regarding the maintenance, composition, quality, and intended use of the training and evaluation data, as well as any statistical bias across model features and protected groups. 
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: ArcGIS ESRI
43_infra_provisioned: Yes
45_compute_request: Yes
47_timely_resources: Yes
49_existing_reuse: None: This use case does not re-use any internally developed tooling or managed infrastructure from any other AI development efforts within the agency.
51_extension_request: No – Agency did not request an extension for this use case.
52_impact_assessment: Yes
53_real_world_testing: Yes
54_key_risks: Data quality
56_monitor_postdeploy: Intermittent and Manually Updated: A plan for monitoring the AI use case is in place, and requires data science teams to work with DevOps engineers to manually update models at scheduled intervals, and create metrics to detect data distribution shifts between the operational environment and the training data for the model. 
57_autonomous_impact: No - Some individual decisions or actions require direct human oversight.
59_ai_notice: None of the above
61_adverse_impact: No
62_disparity_mitigation: N/A - no demographic information used
63_stakeholder_consult: N/A - no demographic information used
65_appeal_process: Yes
67_opt_out: Yes
2_use_case_name: Advanced Network Anomaly Detection
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Network
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Threat hunting and Security Operations Center (SOC) analysts leverage automated tooling to refine alerts that enable discovery and detection of anomalous behavior across the network. These tools use a massive amount of data and provide intelligence beyond what could be seen from a single vector. Correlated network traffic data with proxy communications help identify compromised systems and networks.
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 9/23/2021
19_date_acq_dev_began: 9/23/2021
20_date_implemented: 9/23/2021
23_contract_piids: PO 7030410
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Security Information and Event Management (SIEM) Alerting Models
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Leveraged for comprehensive context interpretation, rapid event detection, and greater productivity with human-assisted automation to SecOps, ITOps. Enables faster alerting, review, and response to terabytes of log data. These automated tools support further refining of alerts based on aggregated data and analyst expertise.
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 9/9/2011
19_date_acq_dev_began: 9/9/2011
20_date_implemented: 1/3/2019
23_contract_piids: PO 309131
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Vulnerability Tracking
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Vulnerability analysts track 1000s of vulnerabilities in real time across and enterprise of technologies. Prioritizing severity is a challenging task when there can be 100s of the same level of severity CVE. The tools in use help prioritize data based on contextual information within the environment and industry while also feeding other factors such as exploitability,
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Initiated
17_impact_type: Neither
18_date_initiated: 2/22/2024
19_date_acq_dev_began: 2/22/2024
20_date_implemented: 2/22/2024
23_contract_piids: PO 7596319
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Advanced Threat Protection
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Protecting against attackers and exploitations means testing using the same strategies that adversaries use. Leveraging billions of data points across operating systems, mail flow, and identity patterns, mathematical and probabilistic based decisions can be made to mitigate and even completed remove threats to the organization. ML and AI technology help reduce phishing emails, malware spread, leveraging compromised accounts, and further promote visibility to threats.
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 9/30/2016
19_date_acq_dev_began: 9/30/2016
20_date_implemented: 9/30/2016
23_contract_piids: Contract 11861
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: AI -Driven Adaptive Protection
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Enables the real-time exchange of machine-readable cyber threat indicators and defensive measures to help protect against and ultimately reduce the prevalence of cyber incidents. This is useful in helping protect networks against human-operated ransomware, where a threat actor can quickly adjust and maneuver inside the network. Leveraging predictive analytics, the technology can actively engage blocking measures to stop further exploitation.
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 9/30/2016
19_date_acq_dev_began: 9/30/2016
20_date_implemented: 9/30/2016
23_contract_piids: Contract 11861
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Attack Surface Management
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Proprietary machine learning models help discover the systems and applications belonging to TVA, across the entire internet. This enables TVA to inventory and take action to ensure protections are in place for external services and applications. These ML tools continuously monitor the attack surface and help prioritize remediation actions for external TVA assets. 
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
23_contract_piids: TBD
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Extended Threat Detection
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Detecting threats within any environment requires large amounts of data, baselines of normalcy, and ability to detect anomalous behaviors within that baseline. Automated detection capabilities leveraging deep packet inspection and real-time analysis to identify the patterns that deviate from what's considered normal enables threat detection and response. Use of unsupervised machine learning models, that learn from previously seen behaviors and are able to determine when something becomes malicious or when an event is considered benign is paramount. New activities are closely monitored in order to most accurately attribute to benign or malicious. Overall, this AI based technology vastly improves visibility and accuracy in threat detection. 
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 1/10/2018
19_date_acq_dev_began: 1/10/2018
20_date_implemented: 1/30/2019
23_contract_piids: PO 3496587
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Augmented Email Protection
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Email protection service that analyzes activity of messages within email services to determine if messages and associated content embedded within is malicious based on signals that include Al-generated signals regarding normative human behavior and known malicious content. 
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 4/23/2024
19_date_acq_dev_began: 4/23/2024
20_date_implemented: 4/23/2024
23_contract_piids: PO 7621572
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Natural Reader
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Workforce Development
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Text-to-speech desktop software for individual use. This easy-to-use software with natural-sounding voices can read any text such as Microsoft Word files, webpages, PDF files, and E-mails.

12_outputs: Speech-to-Text
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 7/28/2023
19_date_acq_dev_began: 7/28/2023
20_date_implemented: 7/28/2023
23_contract_piids: PO 7502095
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: River Forecast
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Riverfleet Management Services
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: A multi-scale graph neural network-based autoregressive model. It is trained on historical weather data from ECMWF's ERA5 reanalysis archive. The tool generates predictions at 6-hour time steps for a set of surface and atmospheric variables.
12_outputs: Atomospheric variable predictions
16_dev_stage: Initiated
17_impact_type: Neither
18_date_initiated: 6/24/2024
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Security Operations Enhancement
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Empowering SOC analysts with AI-enriched threat intelligence to understand landscapes, security posturing, and live attacks. Promoting the prioritization of event handling and investigative actions to identify and stop attacks by optimizing decision-making.
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 9/29/2021
19_date_acq_dev_began: 9/29/2021
20_date_implemented: 9/29/2021
23_contract_piids: PO 7040159
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Advanced Threat Protection
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Protecting against attackers and exploitations means testing using the same strategies that adversaries use. Leveraging billions of data points across operating systems, mail flow, and identity patterns, mathematical and probabilistic based decisions can be made to mitigate and even completed remove threats to the organization. ML and AI technology help reduce phishing emails, malware spread, leveraging compromised accounts, and further promote visibility to threats.
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 3/31/2015
19_date_acq_dev_began: 3/31/2015
20_date_implemented: 3/31/2015
23_contract_piids: PO 816550
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Perimeter Defense
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Network
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Using a combination of ruleset definitions specifically designed to detect malicious activity and augmented by a proprietary machine learning algorithm, this tool protects web applications regardless of location. Models trained based on millions of sampled network traffic enables this tool to proactively detect and prevent malicious network activity from reaching and affecting web applications.
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Acquisition and/or Development
17_impact_type: Neither
18_date_initiated: 9/3/2021
19_date_acq_dev_began: 9/3/2021
20_date_implemented: 9/3/2021
23_contract_piids: PO 6997377
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_data_catalog: Other
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Intrusion Detection Analysis
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Threat hunting and Security Operations Center (SOC) analysts leverage automated tooling to refine alerts that enable discovery and detection of anomalous behavior across the network. These tools use a massive amount of data and provide intelligence beyond what could be seen from a single vector. Correlated network traffic data with proxy communications help identify compromised systems and networks.
12_outputs: Metrics, Alerting, and optional preventative/proactive protections
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 9/11/2018
19_date_acq_dev_began: 9/11/2018
20_date_implemented: 9/11/2018
23_contract_piids: PO 4314465
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Malware Reverse Engineering
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Reverse engineering of malware, and software analysis more broadly, will continue to be a critical activity in support of TVA's cyber protections efforts. Analysis of files, URLs, Hashes, etc., to determine if contents are malicious using a combination of different anti-virus scanners and blocking services to advance efficiency and reduce the time spent by analysts analyzing various content within TVA's technology eco-system. 
12_outputs: Threat Intelligence
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 10/26/2018
19_date_acq_dev_began: 10/26/2018
20_date_implemented: 10/31/2023
23_contract_piids: PO 4480922
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Threat Intelligence Feed
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Cybersecurity
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Information Sharing; advanced technology and industry expertise to provide participants with near real-time delivery of relevant and actionable threat information of external network traffic.
12_outputs: Threat Intelligence
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 10/7/2020
19_date_acq_dev_began: 10/7/2020
20_date_implemented: 10/7/2020
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: AI-Enhanced Search
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: T&I Operations
8_topic_area: Mission-Enabling
10_commercial_ai: Searching for information using AI.
11_purpose_benefits: Portal users can find answers more quickly and easily with features like auto-complete search queries, natural language support, and typo handling.
12_outputs: Knowledge Base Catalog Data
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 3/13/2024
19_date_acq_dev_began: 6/1/2024
20_date_implemented: 6/1/2024
24_hisp_support: No
27_public_info: No
29_contains_pii: Yes
30_saop_review: Yes
31_question_type: Commercial-off-the-shelf
33_agency_data: Knowledge Base Catalog Items
34_data_docs: Documentation is widely available: Documentation is not only complete, but is widely accessible within the agency, and has an owner and a regular update cadence.
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.
2_use_case_name: Network Anomaly Detection
3_agency: Tennessee Valley Authority
3_abr: TVA
4_bureau: Transmission
8_topic_area: Mission-Enabling
10_commercial_ai: None of the above.
11_purpose_benefits: Real-time visibility into network communications, assets, connections, and protocols. 
12_outputs: Detection of anomalous behavior that might impact security or reliability of OT systems
16_dev_stage: Operation and Maintenance
17_impact_type: Neither
18_date_initiated: 6/1/2024
19_date_acq_dev_began: 9/1/2024
20_date_implemented: 9/1/2024
24_hisp_support: No
27_public_info: No
29_contains_pii: No
30_saop_review: No
31_question_type: Commercial-off-the-shelf
37_custom_code: No
38_code_access: No – agency does not have access to source code.
40_has_ato: Yes
41_system_name: Corporate
43_infra_provisioned: Yes
45_compute_request: No
47_timely_resources: Yes
51_extension_request: No – Agency did not request an extension for this use case.