Secure Information Systems and Protect Sensitive Data

Audit By Issue Slug: 
secure-information-systems

Multiple Social Security Numbers Assigned to Non-citizens Using the Enumeration Beyond Entry Program

Date: 
Tuesday, December 17, 2019

Our objective was to determine whether the Social Security Administration's (SSA) controls prevented the assignment of multiple Social Security numbers (SSN) to non-citizens who applied for SSNs through the Enumeration Beyond Entry (EBE) process.

Date: 
Tue, 12/17/2019

The Social Security Administration’s Controls Over Malware Introduced by Email Phishing

Date: 
Wednesday, December 4, 2019

We issued this to determine the effectiveness of Social Security Administration’s (SSA) incident response and continuous monitoring programs in identifying, logging, analyzing, blocking, containing, and reporting command-and-control payload delivery attempts.

Date: 
Wed, 12/04/2019

The Social Security Administration’s Controls Over Malicious Software and Data Exfiltration

Date: 
Wednesday, December 4, 2019

We issued this to determine the effectiveness of the Social Security Administration’s (SSA) incident response and continuous monitoring programs in identifying, logging, analyzing, blocking, containing, and reporting malicious activity and data exfiltration attempts.

Date: 
Wed, 12/04/2019

Security of the Social Security Administration’s Cloud Environment (Limited Distribution)

Date: 
Thursday, August 29, 2019

We issued this to determine whether the Social Security Administration’s (SSA) cloud environment protected the Agency’s sensitive information.

Date: 
Thu, 08/29/2019

Individuals With Earnings Before Receiving Work-Authorized Social Security Numbers

Date: 
Friday, July 19, 2019

We issued this to determine whether noncitizen workers met the criteria of section 211 of the Social Security Protection Act of 2004 (SSPA) when they received credit for wages earned before they received their Social Security numbers (SSN). 

Date: 
Fri, 07/19/2019

Verifying the Identities of Individuals Who File Internet Claims (Congressional Response Report, Limited Distribution)

Date: 
Wednesday, November 7, 2018

Our objective was to answer congressional questions about the Social Security Administration’s Internet Claims system.

Date: 
Wed, 11/07/2018

The Social Security Administration's Comprehensive Integrity Review Process (Limited Distribution)

Date: 
Monday, September 10, 2018

Our objective was to determine whether SSA ensured its Comprehensive Integrity Review Process identified potentially fraudulent or improper employee transactions in the most cost-effective manner.

Date: 
Mon, 09/10/2018

Pages