Ensure there are resources available for further development of geocoding services that fulfill HUD’s responsibilities stated in 43 U.S.C. § 2808(a)(5) and 43 U.S.C. § 2808(a)(12) through the reactivation of the lapsed Geocode Service Center contract.

HUD OCIO should implement procedures to ensure that information in cybersecurity risk registers is obtained accurately, consistently, and in a reproducible format and is used to a. quantify and aggregate security risks, b. normalize cybersecurity risk information across organizational units, and c. prioritize operational risk response (derived from metric 5).

HUD OCIO and the HUD Chief Risk Officer should coordinate to implement procedures to monitor the effectiveness of cybersecurity risk responses to ensure that risk tolerances are maintained at an appropriate level (derived from metric 5).

HUD OCIO and the Office of Administration should implement procedures to ensure proper validation of media sanitization in accordance with HUD Media Protection Procedures 2.0 (February 2022) and form HUD 1067A, Certification of Sanitization (derived from metric 36).

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

HUD OCIO should ensure that system owners and information system security officers consistently test their ISCPs and upload the test results to CSAM in accordance with HUD’s defined ISCP testing policy (derived from metric 63).

Use the fraud risk inventory to enhance program-specific fraud risk assessments for the HOME program.

Use the fraud risk inventory to enhance program-specific fraud risk assessments for the PBRA program.

Use the fraud risk inventory to enhance program-specific fraud risk assessments for the TBRA and Operating Fund programs.

Consider allowing grantees additional time to spend the program funding on eligible activities to meet the 80 percent spending deadline.

Consider streamlining program requirements to help grantees promptly use program funds to assist those impacted by the pandemic or for activities that prepare for, prevent, or respond to the coronavirus.

Provide adequate documentation to support that the $2,588,362 in CDBG-DR funds for three unsupported project and program management services expenditures cited in this report was spent for supported, necessary, and reasonable costs. Any amount for which adequate support cannot be provided should be repaid from non-Federal funds.

Update its procurement policy to clearly define the process, which includes timing and the procurement types, for conducting an independent cost estimate and a price analysis.

Provide training to State staff to ensure that it understands and follows (1) requirements to maintain adequate documentation to support that program disbursements are eligible and reasonable and (2) procurement requirements, including independent cost estimates, cost analyses, proposal scoring, and the timely checking of the SAM data for contractors’ eligibility.

We recommend that the Director of HUD’s Newark Office of Public Housing make a determination regarding outstanding agreement income, including whether those unspent funds should be returned to the public housing agencies, thereby putting up to $697,912 to better use, including $478,165 related to Asbury Park and $219,747 related to Red Bank.

We recommend that the Director of HUD’s Newark Office of Public Housing provide technical assistance to Long Branch and require updates to its procedures to ensure that it properly classifies income received under any future agreements or activities.

We recommend that the Director of HUD’s Newark Office of Public Housing require Long Branch to prepare and provide support for a reasonable estimate of the amount of employee time used to perform services for Asbury Park and Red Bank and the amount of Long Branch program funds used to pay for that time. This estimate should include all employees known or believed to have provided services under the agreements based on language in the agreements, incentive payments, after-the-fact documentation provided, and any other applicable knowledge or documentation, which would show that the employees performed work under the agreements.

We recommend that the Director of HUD’s Newark Office of Public Housing require Long Branch to reimburse Long Branch’s program from non-Federal funds for any Long Branch program funds used for payroll expenses related to services provided to Asbury Park and Red Bank as established in recommendation 2A, estimated to be $1,014,660.

We recommend that the Director of HUD’s Newark Office of Public Housing require Long Branch to prepare and provide support to show the reasonableness and eligibility of the $1,583,652 in employee incentive payments related to services performed for Asbury Park and Red Bank, which was paid from agreement income, or reimburse its program from non-Federal funds for any amount it cannot support.

We recommend that the Director of HUD’s Newark Office of Public Housing require Long Branch to implement adequate controls to ensure compliance with applicable cost principle requirements for employees, including those covering compensation for personal services, such as wages, salaries, and incentive payments, at 2 CFR 200.430. Records should reasonably reflect the total activity for which Long Branch’s employees are compensated by the non-Federal entity and support the distribution of compensation among specific activities and cost objectives.