Addendum to Supporting Statement

Addendum to the Supporting Statement for

Social Security Administration’s Integrated Registration Services (IRES) System

20 CFR 401.45

OMB No. 0960-0626

Terms of Clearance

OMB placed the following Terms of Clearance on OMB No. 0960-0626 in 2009:

OMB is approving this collection for 36 months with the condition that SSA will conduct a new E-Authentication risk assessment each year, as is required by OMB Memorandum 04-04, and again after 36 months before seeking re-approval. These risk assessments should analyze the agency’s authentication processes in light of current standards and induce any changes that are appropriate. A written summary of the results of the risk assessments should be shared with OMB as part of any future requests for approval. In performing these risk assessments, SSA should comply with all OMB guidance and National Institute of Standards and Technology standards. The agency should also consult any guidance from the Chief Information Officers Council.

To comply with these Terms, SSA conducts regular authentication risk assessments on all our new and existing public facing online applications. We shared our new authentication and registration process with OMB in Clearance No. 0960-0789, as part of SSA’s Public Credentialing and Authentication Process gradual roll-out strategy, which will eventually absorb the IRES system functionality. The 0960-0789 clearance package fulfills SSA’s obligation to conduct an assessment of the risks and benefits of the electronic information collection system currently known as IRES, which will become a component of SSA’s Public Credentialing and Authentication Process. The new Public Credentialing and Authentication process meets the OMB and NIST guidelines and standards.

Minor Revisions to the Collection Instrument

SSA is making the following revisions:

We are revising the PRA statement to reflect our current boilerplate language.  The current language, which dates back to the last reprint of the form, is now outdated.

SSA’s Office of the General Counsel is conducting a systematic review of SSA’s Privacy Act Statements on agency forms. As a result, SSA is updating the Privacy Act Statement on the first page of the form.