THE OUTCOMES OF THE INDEPENDENT INVESTIGATION INTO THE COVID-19 SRD GRANT

• Two University of Stellenbosch students raised concerns about the security of SASSA’s application system, prompting Parliament to recommend an in-depth investigation into the Social Relief of Distress (SRD) and other grant systems.
• The Minister of Social Development committed to reviewing SASSA’s grant infrastructure, focusing on enhancing system security, protecting beneficiary data, and addressing vulnerabilities identified through audits and internal assessments.
• While SASSA has successfully managed unprecedented volumes of applications during the COVID-19 pandemic, it has intensified efforts to combat identity theft and cyber threats.

Two first-year students from the University of Stellenbosch alleged that the South African Social Security Agency’s (SASSA) application system was vulnerable to security risks. These claims were shared across various media platforms, including a presentation to the Portfolio Committee on 23 October 2024.

In response, Parliament called for a comprehensive investigation into SASSA’s Social Relief of Distress (SRD) system and other grant administration processes. This directive highlighted the need to protect the integrity and security of digital systems across various grant types, including Child Support, Disability, Old Age Pension, and Foster Child grants.

Parliamentary Directive and Ministerial Response

In light of these allegations, the Minister of Social Development pledged a thorough review of SASSA’s grant systems. The focus was on identifying and addressing vulnerabilities, safeguarding beneficiary data, and ensuring the responsible use of public resources.

Key Findings

Initial assessments revealed several medium-level vulnerabilities in the system.

Context and Achievements

The COVID-19 pandemic posed unique challenges for SASSA, requiring an innovative approach to implement the SRD grant. With restrictions on physical interactions and no prior database for applicants, the agency launched an online application system. By 15 May 2020, SASSA had disbursed grants to six million new clients—a feat that typically would have taken decades.

Today, SASSA processes approximately 17 million SRD grant applications each month. This milestone underscores the agency’s dedication to serving South Africans in need.

Enhancing Security and Combating Fraud

As technology evolves, so do cyber threats. Like many other sectors, the SRD program has faced challenges, including identity theft. To address these, SASSA intensified fraud prevention efforts since 2023 by:

• Implementing facial biometrics through the electronic Know Your Client (eKYC) program.
• Strengthening collaboration with law enforcement, government entities, and the banking sector.
• Introducing the Know Your Grant Status program to help individuals identify potential identity theft.

SASSA staff also conduct weekend outreach programmes to assist clients with resolving issues promptly.

Commitment to System Integrity

SASSA acknowledged the findings of recent audit reports and appreciated their role in improving oversight and resilience. Management reviewed the audit findings, which aligned with internal vulnerability scans and penetration tests, and planned further discussions with auditors to strengthen systems.

The agency assured clients that its systems remained secure, with robust control measures in place to ensure efficient service delivery. Investments in technological improvements continued to prioritise accessibility, service excellence, and a positive societal impact.

SASSA remained committed to balancing security enhancements with user-friendly services, maintaining trust, and supporting vulnerable South Africans effectively.