Perform a comprehensive analysis for all cohort years and assess the impact that the use of the scheduled UPB instead of the current UPB has on the LGL. If significant based on a quantitative threshold, update the SF cash flow model to incorporate the current UPB data.

Develop and implement a new process to require the annual validation of the fourth quarter endorsement volume estimation method for the SF Forward model. The process should include a management review and approval control component. The process should be documented and should demonstrate that management’s estimate is based on the analysis of past experiences, current policy, and market considerations, and, if necessary, incorporate improvement recommendations.

Perform a comprehensive review of the SF and HECM model documentation and update the specific sections with the current practices and procedures required to execute the model activities.

Establish a process that requires the timely review and update of model documentation. The process should include tracking the dates and nature of the revisions.

Provide training and periodic reminders to field staff and management to ensure that the data fields in DAP and on the final Form HUD-290 are accurate and consistent.

Develop and implement written procedures that provide guidance or best practices that should be followed to address data anomalies. At a minimum, these written procedures should include the following: (1) a process for identifying key data attributes that significantly impact the results, (2) the determination of preset thresholds for analyst and management attention, (3) the treatment of data anomalies, such as null values or values that exceed preset thresholds, (4) a process for providing feedback to the upstream data provider(s) for corrective and preventive actions when data integrity issues are detected and management concludes the issue is significant, and (5) a process for preparing documentation to support management decisions.

As part of the validation process for CPD’s accrued liabilities, improve its validation process to ensure that it is based on verifiable grantees responses and supporting documentation.

We are recommending OCFO reopen the following recommendation reported in audit report 2021-FO-0003-0001-D: 1B. As part of the validation process for CPD’s accrued grant liabilities, review CPD’s accrued grant liabilities estimation methodology to ensure that it is based on verifiable grantee supporting documentation and all assumptions and variables used for the grant accrual estimate were properly established, supported, and documented.

Implement a policy to ensure the federal regulation responsibilities for outgoing HUD employees are reassigned to appropriate HUD personnel to enable HUD to continue to address those federal regulation requirements.

Establish controls to determine if single audits for HUD grantees are being completed and reported in a timely manner in accordance with 2 CFR §200.512.

Provide a means for which HUD grantees and their auditors can request technical advice and counsel.

Establish controls to determine if follow-up is being conducted to determine if the grant recipients have taken appropriate and timely corrective action. That follow-up must include the following: a. Issuing a management decision letter as prescribed in 2 CFR §200.521; b. Monitoring recipients to ensure they are taking appropriate and timely corrective action; c.Using cooperative audit resolution mechanisms (see 2 CFR §200.25) to improve federal program outcomes through better audit resolution, follow-up, and corrective action; and d. Developing a baseline, metrics, and targets to track, over time, the effectiveness of HUD’s process to follow-up on audit findings and on the effectiveness of single audits in improving recipient accountability and their use by HUD in making award decisions.

Establish controls to ensure that HUD provides Office of Management Budget (OMB) annual updates to the compliance supplement6 and works with OMB to ensure that the supplement focuses the auditor to test compliance requirements most likely to cause improper payments, fraud, waste, abuse or generate audit findings for which HUD will take sanctions.

Establish a control to hold HUD’s Single Audit Accountable Official responsible for improving the effectiveness of the single audit process based on single audit metrics that HUD will establish in response to recommendation 4D above.

Conduct a departmentwide comprehensive staff capacity assessment to identify resource and skills gaps of staff involved in IT acquisitions.

Develop a departmentwide human capital plan or evaluate and revise existing plans to guide the recruitment, retention, and skill development of staff involved in IT acquisitions. The plan should include related metrics to measure plan implementation and effectiveness.

Evaluate IT acquisition process workflows and identify ways to simplify the processes, facilitate more effective stakeholder coordination across offices, and create efficiencies when possible.

Status

The Office of the Chief Procurement Officer had agreed to an estimated completion date of March 2024. In April, The Office of the Chief Procurement Officer provided a status update and agreed to provide updated standard operating procedures once completed. However, no updated date for completion was provided.

Analysis

To fully address this recommendation, HUD must provide evidence that it has published its standard operating procedures resulting from its evaluation of workflows and efforts to simplify processes and facilitate more effective coordination.

Implementation of this recommendation will result in a defined IT acquisition process workflow standard operation procedure to ensure coordination across program offices.

Establish a centralized acquisition tracking system that allows for input and monitoring by all offices involved with the IT acquisition process by: a. Developing a plan with detailed implementation milestones; b. Obtaining appropriate approvals and funding; and c. Implementing a centralized acquisition tracking system, based on the implementation plan and approvals from 4a and 4b.

Develop a plan for clearly defining, communicating, and enforcing IT acquisition process standards, including acquisition process roles and responsibilities.

Complete a program-specific fraud risk assessment and risk profile for the CDBG and ESG programs, with emphasis on CARES Act funding, and replicate this process to create program-specific fraud assessments and risk profiles for other CPD programs.