Update and obtain final NARA approval of all HUD records retention schedules, including the Capstone email schedule, to comply with Federal requirements, including OMB M-19-21.

Develop and approve an enterprise strategy to meet all M-19-21 electronic transition requirements.

Issue a formal policy and requirements for managing CUI.

Complete the development of performance measures and establish a formal records evaluation process to measure the effectiveness and progress of the records management program.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Develop the technical capability to identify, inventory, and monitor the existence of PII within the HUD environment

Develop and implement a process to inventory all agency PII holdings not less than annually.

Continue to develop required ONAP-LOS capabilities using cloud environments as appropriate

Coordinate and participate in resolving all open recommendations from evaluation report IT System Management and Oversight of the Section 184 Program (2018-OE-0004)

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.