Social Security Administration

The attached final report summarizes Ernst & Young LLP’s Fiscal Year (FY) 2024 review of the Social Security Administration’s (SSA) information security program and practices, as required by the Federal Information Security Modernization Act of 2014 (FISMA). The objective was to determine whether...

Objective: To determine whether the Social Security Administration complied with the Strengthening Protections for Social Security Beneficiaries Act of 2018 and its policies and procedures related to representative payee reviews and educational visits.

Attached is Ernst & Young LLP's final audit report. Their objective was to determine the extent to which (1) the Social Security Administration had improved its cyber-security posture by defining and implementing plans to modernize or replace and retire its legacy information technology systems and...

Objective: To determine whether the Social Security Administration’s employees fully developed work activity and earnings for Old-Age, Survivors, and Disability Insurance disability claimants at the initial and reconsideration levels of the application process.

Objective: To determine whether the Social Security Administration acted in accordance with its policies and procedures when it processed Supplemental Security Income ineligibility determinations and suspensions based on applicants’, recipients’, or representative payees’ failure to provide...

Objective: To determine whether the Social Security Administration was managing its Security Assessment and Authorization process in accordance with Federal and Agency requirements.

Objective: To determine whether Social Security Administration employees properly processed representative payee applications in the Electronic Representative Payee System.

Objective: To determine whether the Social Security Administration developed the Debt Management Product in accordance with Federal best practices and met its project cost and schedule estimates.

Objective: To determine whether the Social Security Administration issued payments to beneficiaries who were reported as missing in the National Missing and Unidentified Persons System.

Objective: To determine whether Social Security Administration timely recovered unclaimed assets held by states and the District of Columbia.