Digital Identity in my Social Security

The objective was to determine whether the Social Security Administration’s identity verification controls for the my Social Security portal were compliant with Federal requirements. Our audit report (A-14-18-50486) results contain information that, if not protected, could result in adverse effects to the Agency’s information systems. In accordance with government auditing standards, we have separately transmitted to SSA management our audit’s detailed findings and recommendations and excluded from this summary certain sensitive information because of the potential damage if the information is misused. We determined the omitted information neither distorts the audit results described in this report nor conceals improper or illegal practices.