Skip to main content
Report File
Date Issued
Submitting OIG
Social Security Administration OIG
Other Participating OIGs
Social Security Administration OIG
Agencies Reviewed/Investigated
Social Security Administration
Report Number
142309
Report Description

The attached final report summarizes Ernst & Young LLP’s (Ernst & Young) review of the Social Security Administration’s (SSA) ransomware prevention and response strategy. Ernst & Young’s audit results contain information that, if not protected, could result in adverse effects to the Agency’s information systems. In accordance with government auditing standards, we have separately transmitted to SSA management Ernst & Young’s detailed findings and recommendations and excluded from this summary report certain sensitive information because of the potential damage if the information is misused. We have determined the omitted information neither distorts the audit results described in this report nor conceals improper or illegal practices.

Report Type
Audit
Agency Wide
Yes
Number of Recommendations
6
Questioned Costs
$0
Funds for Better Use
$0

Open Recommendations

This report has 5 open recommendations.
Recommendation Number Significant Recommendation Recommended Questioned Costs Recommended Funds for Better Use Additional Details
2 No $0 $0 Disagree

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

3 No $0 $0 Disagree

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

4 No $0 $0 Disagree

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

5 No $0 $0 Agree

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

6 No $0 $0 Disagree

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

Social Security Administration OIG

United States