The Social Security Administration’s Controls Over Malware Introduced by Email Phishing

We issued this to determine the effectiveness of Social Security Administration’s (SSA) incident response and continuous monitoring programs in identifying, logging, analyzing, blocking, containing, and reporting command-and-control payload delivery attempts.