Office of the Inspector General, SSA
Social Security Administration
SSA’s Compliance with the Federal Information Security Management Act of 2002 for Fiscal Year 2012
Date:
Thursday, November 15, 2012
Management Issue:
Report Number:
A-14-12-12120
Report Type:
Audit Report
Office Affiliation:
FISMA provides the framework for securing the Government’s information and information systems. FISMA requires that each agency develop, document, and implement an agency-wide information security program. FISMA also requires that each agency’s Inspector General, or an independent external auditor, perform an independent evaluation of the agency’s information security program and practices to determine their effectiveness.
Our objective of this audit was to determine whether the Social Security Administration’s (SSA) overall information security program and practices were effective and consistent with the requirements of the Federal Information Security Management Act of 2002 (FISMA), as defined by the Department of Homeland Security.
