The Social Security Administration’s Controls Over Malicious Software and Data Exfiltration

Date: 
Wednesday, December 4, 2019
Report Number: 
A-14-18-50709
Report Type: 
Audit Report
Office Affiliation: 

We issued this to determine the effectiveness of the Social Security Administration’s (SSA) incident response and continuous monitoring programs in identifying, logging, analyzing, blocking, containing, and reporting malicious activity and data exfiltration attempts.