This inaugural disaster recovery biannual report and subsequent reports will provide curated information regarding the U.S. Department of Housing and Urban Development (HUD) and its grantees’ use of the more than $109 billion in disaster recovery funds approved by Congress since the 2001 World Trade Center attack, as well as information on new or completed HUD OIG oversight work related to HUD’s disaster recovery program.HUD’s grantees...

HUD OIG is auditing the U.S. Virgin Islands (USVI). As a result of the devastation caused by hurricanes Irma and Maria during September 2017, HUD allocated almost $2 billion in Community Development Block Grant Disaster Recovery and Mitigation funds to USVI to help it recover from the hurricanes. Our objective is to assess USVI’s fraud risk management practices including control activities to prevent, detect, and respond to fraud while...

The OIG Office of Evaluation is initiating an evaluation of the U.S. Department of Housing and Urban Development’s (HUD) Public and Indian Housing (PIH) Information Technology (IT) Modernization program. The objectives are to assess the IT Modernization process for Enterprise Voucher Management System (EVMS) and Housing Information Portal (HIP) systems that support key PIH programs.

To assess the operational effectiveness of security controls for selected HUD IT systems or functions.

The U.S. Department of Housing and Urban Development (HUD) administers billions in presidentially declared disaster recovery grants through its Community Development Block Grant Disaster Recovery program.  We audited five non-State grantees to assess whether they are on track to spend their remaining grant funds on eligible activities that benefit program participants within a reasonable amount of time.  We also wanted to...

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General (OIG) is auditing the use of Community Development Block Grant Disaster Recovery (CDBG-DR) funds as non-Federal match for the Federal Emergency Management Agency’s (FEMA)Public Assistance Program.  Our objectives are to determine whether four CDBG-DR grantees made improper payments and whether the Office of Community Planning and...

We audited the project activity status for 12 grantees that received funds under the U.S. Department of Housing and Urban Development’s (HUD) Community Development Block Grant (CDBG) National Disaster Resilience (NDR) grant to determine whether the grantees have accomplished or are on track to accomplish the goals of the activities outlined in their action plans. We found that NDR grantees should be able to accomplish their...

HUD OIG is auditing the State of Florida’s home rehabilitation and reconstruction program. The State has spent majority of its funds for home rehabilitation and reconstruction activities; however, it has not completed a similar percentage of expected homes. Our audit objective is to assess (1) the State’s overall program progress and outcomes including the status of the funding, the number of homes assisted, and the cost of assistance...

The OIG evaluated the U.S. Department of Housing and Urban Development’s (HUD) progress in applying zero trust security principles to protect personally identifiable information (PII).  HUD maintained a significant number of records that contain PII with limited zero trust controls in place to secure these data.  In FY 2022, HUD established a zero trust implementation plan to help the agency address the five zero trust...

HUD OIG is conducting the Fiscal Year (FY) 2025 evaluation of the HUD's information security (InfoSec) program and practices, as required by the Federal Information Security Modernization Act of 2014 (FISMA). The objectives are to (1) perform an independent evaluation of the effectiveness of HUD’s InfoSec program and practices as required by FISMA; (2) test the effectiveness of HUD’s InfoSec policies, procedures, and practices through...

The OIG evaluated the U.S. Department of Housing and Urban Development (HUD) Office of Housing’s (Housing) progress in applying zero trust security principles to protect personally identifiable information (PII) within the Federal Housing Administration (FHA) Catalyst system.HUD was in the beginning stages of implementing zero trust requirements for the data and identity pillars. HUD Office of Housing systems, including FHA Catalyst,...

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to...

 The Geospatial Data of 2018 (the Act) governs the collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data of covered agencies, including the U.S. Department of Housing and Urban Development (HUD).  We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the geospatial data requirements stated in the Act.  The Act requires the Inspector...

HUD OIG is auditing Puerto Rico's Community Energy and Water Resilience Installations Program (CEWRI). HUD awarded Puerto Rico over $20 billion dollars in CDBG-DR funding after the impact of Hurricanes Irma and Maria. Of the total award, $395 million was budgeted to the CEWRI program. Our objective is to determine to what extent did the CEWRI program address the energy and water system vulnerabilities of its low-and-moderate income...

We reviewed the Puerto Rico Department of Housing’s (PRDOH) Electrical Power System Enhancements and Improvements programs to provide (1) background and funding information, (2) an update on the status of the programs and their progress, and (3) other relevant program information for interested stakeholders including Congress and the public. The U.S. Department of Housing and Urban Development (HUD) provided its grantee, PRDOH, $1...

We audited the Puerto Rico Housing Finance Authority’s (PRHFA) Homebuyer Assistance Program (HBA), which provides eligible applicants with closing costs and downpayment assistance for the purchase of a primary residence.  The U.S. Department of Housing and Urban Development (HUD) provided its grantee, the Puerto Rico Department of Housing (PRDOH), $495 million in Community Development Block Grant Disaster Recovery funds for HBA...

In January 2017, HUD awarded the City $141.2 million in Community Development Block Grant National Disaster Resilience grant funding for disaster resilience. HUD designed the grant to give states flexibility in planning program activities and help state and local communities recover from past disasters, while also improving their infrastructure to withstand future extreme events through strategic community investments.  The City...

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to...

HUD OIG is performing this evaluation to assess HUD’s capability to meet privacy and data protection requirements and provide appropriate stakeholders with an understanding of any related potential risks to HUD’s data and the operational mission. The evaluation will also provide HUD an independent assessment of the level of maturity it has reached in developing the data and identify pillars of CISA's zero-trust architecture. The...

From 2001 to 2022, the Community Development Block Grant - Disaster Recovery program provided almost $98 billion to states, cities, counties, and territories to help them recover from disasters.  Administering disaster recovery has been a recurring U.S. Department of Housing and Urban Development (HUD) top management challenge since 2018.  Therefore, we audited the disaster recovery program to determine whether the Office of...