Our objective was to assess the Social Security Administration's (SSA) contractor process to safeguard Homeland Security Presidential Directive 12 (HSPD-12) credentials and the personally identifiable information (PII) contained in them.