Assessing the Social Security Administration’s security framework
Assessing the Social Security Administration’s security framework
2 Pagescoalfire.com | 877.224.8077 | info@coalfire.com CLIENT CHALLENGE The newly formed SSA Office of Information Security needed to document the large, complex system boundaries of enterprise information systems and to evaluate each system’s security controls to adequately assess the agency’s IT risks. The SSA was adopting the Risk Management Framework (RMF) and implementing the Cyber Security Assessment and Management (CSAM) tool as an automated solution to support the security authorization process and effectively manage the agency’s IT risks. Additionally, the SSA was increasing its Internet presence to allow customers to seek more services online, and the agency needed to ensure that publically accessible Internet applications were adequately secured. APPROACH To address the b
