Fiscal Year 2004 Evaluation of the Social Security Administration’s Compliance with the Federal Information Security Management Act

Objective: To determine whether the Social Security Administration’s (SSA) overall security program and practices complied with the requirements of the Federal Information Security Management Act (FISMA) of 2002. We also reviewed the Agency’s efforts to reach green on the security portion of the expanded electronic Government initiative of the President’s Management Agenda. Our analysis included an evaluation of SSA’s plan of action and milestones, certification and accreditation, and systems inventory processes.