Security of the Business Services Online

The attached final report summarizes Ernst & Young LLP’s (Ernst & Young) review of the Security of the Business Services Online.

Under a contract the Office of Audit monitored, Ernst & Young, an independent certified public accounting firm, reviewed the Business Services Online. Ernst & Young interviewed Social Security Administration staff and management and reviewed evidence the Agency provided.

Ernst & Young’s audit results contain information that, if not protected, could be used to adversely affect SSA’s information systems. In accordance with government auditing standards, we have transmitted Ernst & Young’s detailed findings and recommendations to SSA management and excluded from this summary certain sensitive information because of the potential damage if the information is misused. The omitted information neither distorts the audit results described in this report nor conceals improper or illegal practices.