The Social Security Administration’s Controls Over Malware Introduced by Email Phishing

Date: 
Wednesday, December 4, 2019
Report Number: 
A-14-18-50710
Report Type: 
Audit Report
Office Affiliation: 

We issued this to determine the effectiveness of Social Security Administration’s (SSA) incident response and continuous monitoring programs in identifying, logging, analyzing, blocking, containing, and reporting command-and-control payload delivery attempts.