The Social Security Administration’s Controls Over Malware Introduced by Email Phishing

Wednesday, December 4, 2019
Report Number: 
Report Type: 
Audit Report
Office Affiliation: 

We issued this to determine the effectiveness of Social Security Administration’s (SSA) incident response and continuous monitoring programs in identifying, logging, analyzing, blocking, containing, and reporting command-and-control payload delivery attempts.