The OIG evaluated the U.S. Department of Housing and Urban Development’s (HUD) progress in applying zero trust security principles to protect personally identifiable information (PII).  HUD maintained a significant number of records that contain PII with limited zero trust controls in place to secure these data.  In FY 2022, HUD established a zero trust implementation plan to help the agency address the five zero trust...

The OIG evaluated the U.S. Department of Housing and Urban Development (HUD) Office of Housing’s (Housing) progress in applying zero trust security principles to protect personally identifiable information (PII) within the Federal Housing Administration (FHA) Catalyst system.HUD was in the beginning stages of implementing zero trust requirements for the data and identity pillars. HUD Office of Housing systems, including FHA Catalyst,...

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to...

We audited the U.S. Department of Housing and Urban Development (HUD), Office of Fair Housing and Equal Opportunity’s (FHEO) challenges in completing housing discrimination investigations within 100 days.  We initiated the audit due to the number of investigations reported in FHEO’s annual reports to Congress that exceeded 100 days.  Our objective was to survey and assess the challenges FHEO faces in completing investigations...

 The Geospatial Data of 2018 (the Act) governs the collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data of covered agencies, including the U.S. Department of Housing and Urban Development (HUD).  We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the geospatial data requirements stated in the Act.  The Act requires the Inspector...

We audited the U.S. Department of Housing and Urban Development’s (HUD or Department) Office of Fair Housing and Equal Opportunity’s (FHEO) process for conducting civil rights compliance reviews.  FHEO’s operational readiness to carry out robust compliance reviews is critical to HUD’s goals to advance equity and support underserved communities.  Our objective was to survey and assess challenges FHEO faced in conducting...

We audited the U.S. Department of Housing and Urban Development (HUD), Office of Fair Housing and Equal Opportunity’s, implementation of Executive Order 13988, which President Biden issued to prevent and combat discrimination on the basis of gender identity or sexual orientation.  We performed this audit to assess HUD’s progress in developing an action plan to implement the executive order.  Our audit objective was to...

We audited the U.S. Department of Housing and Urban Development’s (HUD) Office of Fair Housing and Equal Opportunity, Fair Housing Initiatives Program (FHIP), Education and Outreach Initiative (EOI).  We conducted this audit to help HUD determine whether the education and outreach provided was going to the people who have been systematically denied full housing opportunity.  Our audit objective was to assess how FHIP...

We audited the Kentucky Commission on Human Rights’ fair housing complaint intake process.  We initiated this audit based on an internal risk assessment of Fair Housing Assistance Program agencies’ challenges.  Our audit objectives were to (1) determine the extent to which the Commission processed fair housing inquiries within 30 days and (2) evaluate its reasons for closing fair housing inquiries.We were unable to determine...

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to...

We conducted this evaluation to assess the maturity of HUD’s Robotic process automation (RPA) activities and determine whether HUD had implemented related controls to address technology and program management risks.  RPA is a software technology used to emulate human actions on a computer.  RPA software programs, referred to as “bots,” can complete repetitive tasks quickly and consistently, freeing up employees to work on...

We audited the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) infrastructure to support mandatory telework. During mandatory telework, more employees simultaneously needed remote access to HUD’s network and agency resources for an extended period, which presented unique risks and security requirements. While HUD is no longer operating under mandatory telework, understanding the challenges it faced...

We determined that FHEO could provide more guidance related to FHEO’s performance assessment process to improve its oversight of State and local fair housing enforcement agencies participating in FHAP.  The FHAP Division has provided guidance that FHEO regional staff responsible for monitoring and overseeing FHAP agency performance (HUD reviewers) does not consistently follow.  Additionally, although all HUD reviewers work...

We audited the U.S. Department of Housing and Urban Development’s (HUD) Title VIII complaint intake data and jurisdictional determinations recorded in the HUD Enforcement Management System (HEMS).  We initiated this audit to assist HUD with identifying opportunities to improve its data collection and jurisdiction determination process.  Our audit objective was to assess HUD’s Title VIII fair housing complaint intake process...

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation...

We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the Geospatial Data Act of 2018 (the Act). Our audit objective was to determine whether HUD met the 13 responsibilities stated in the Act with regard to its collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data.  The Act also generally requires covered agencies provide access to geospatial...

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) ability to effectively complete information technology (IT) acquisitions.  HUD’s IT systems and its modernization plans depend heavily on contractors, yet HUD has historically faced significant challenges with implementing effective acquisition processes. Therefore, HUD’s acquisition capacity represents a key potential risk within HUD’s IT environment. We...

In February 2021, the Office of the Chief Information Officer (OCIO) identified funding risks with the development contract under which HUD contracted for Federal Housing Administration (FHA) Catalyst’s development.  In response, HUD officials took steps to slow FHA Catalyst spending on the contract while awaiting approval for additional contract funds.  Despite efforts to slow project spending, it was not enough to prevent...

We completed an audit of the Kankakee Count Housing Authority's Section 8 Housing Program. The audit was conducted based upon a citizen's complaint to our Office. The objectives of our audit were to determine where the Authority: (1) administered its Section 8 Program in an efficient and effective manner; and (2) provided decent, safe, and sanitary housing for its Section 8 tenants. This audit is part of our on-going comprehensive...