Complete and update the system security plans for GMP and DRGR and issue an SSN justification memorandum.

Identify and provide additional role-based training, guidance, and instructions to CPD employees on how to appropriately handle and safeguard PII encountered during monitoring.

Reinforce the use and admissibility of photographs and videos for evidence collection while remote monitoring.

Identify strategic opportunities to use remote monitoring early in the FY to maximize its responsibility to oversee and monitor its grantees and then use remote monitoring when those opportunities arise.

We recommend that the Director of CPD’s Office of Disaster Recovery review the one grantee with a grant totaling $666,666 that did not meet the overall LMI requirement and address the noncompliance.

We recommend that the Director of CPD’s Office of Disaster Recovery update DRGR’s QPR to include information on the progress towards compliance with the overall LMI benefit based on the total amount of the grant.

Develop and document internal procedures to ensure that they will address the Program Office’s responsibilities within the departmental grant accrual validation policy.

Re-evaluate and adequately document justification for the establishment of the percentages and other key assumptions used to determine the accrual amount for each program in CPD’s accrued grant liabilities estimate.

Implement written procedures to ensure consistency among field offices in reviewing spending issues, potentially preventing up to an estimated $47 million in annual CoC recaptures.

Design and implement a training program and other development tools to help grantees. The goal of such training would be to provide ideas and other development tools to help the CoCs better provide assistance with implementation of their grants and monitoring of their grantees, including assistance with developing outreach strategies, partnering with community providers, financial budgeting, and best practices. The training should focus on the needs of first-year grantees and CPD should take steps to encourage participation.

Consider allowing grantees additional time to spend the program funding on eligible activities to meet the 80 percent spending deadline.

Consider streamlining program requirements to help grantees promptly use program funds to assist those impacted by the pandemic or for activities that prepare for, prevent, or respond to the coronavirus.

Provide adequate documentation to support that the $2,588,362 in CDBG-DR funds for three unsupported project and program management services expenditures cited in this report was spent for supported, necessary, and reasonable costs. Any amount for which adequate support cannot be provided should be repaid from non-Federal funds.

Update its procurement policy to clearly define the process, which includes timing and the procurement types, for conducting an independent cost estimate and a price analysis.

Provide training to State staff to ensure that it understands and follows (1) requirements to maintain adequate documentation to support that program disbursements are eligible and reasonable and (2) procurement requirements, including independent cost estimates, cost analyses, proposal scoring, and the timely checking of the SAM data for contractors’ eligibility.

Consider grant recipients’ feedback on challenges with (1) capacity, (2) multiple other sources of funding, and (3) subrecipient monitoring as part of CPD’s risk assessments.

Collaborate with the Deputy Chief Financial Officer to work with grantees in identifying where improper and unknown payments could occur in the CPD-HIM program throughout the payment cycle, to include the risks associated with subgrantee billing, and document this analysis.

Collaborate with the Deputy Chief Financial Officer and use the analysis developed in 3A to ensure that HUD’s improper and unknown payment testing procedures are (1) designed to test the full payment cycle and (2) include the review of documentation that supports that final beneficiaries were eligible, goods and services were received, and payments went to the correct final beneficiaries and were for the correct amount.

Work with the Office of Community Planning and Development’s Chief Risk Officer and grantees to better identify the risks of improper and unknown payments throughout the payment cycle, to include the risks associated with grantees and subgrantees, and consider these risks when performing the CDBG and Homeless Assistance Grant risk assessments.

Work with the Deputy Chief Financial Officer to develop and design a process to ensure that each attribute evaluated during the PIIA risk assessment is evaluated at all levels of the full payment cycle.