U.S. flag

An official website of the United States government Here’s how you know

The .gov means it’s official.

Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.

The site is secure.

The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Exportar
Date Issued

Chief Financial Officer

  •  
    Status
      Open
      Closed
    2021-FO-0003-001-A

    Prepare a white paper regarding the accounting treatment for each type of funding disbursed under the HCVP, to include a comparison of the qualities the funding embodies against the qualities that are necessary for it to be considered a prepayment versus an expense according to generally accepted accounting principles. The Chief Financial Officer should work with PIH to gather the information necessary to complete this analysis and have PIH review it to ensure the accuracy of the program information used.

  •  
    Status
      Open
      Closed
    2021-FO-0003-001-B

    Develop and implement a policy that requires OCFO to review all new program notices, new regulations, and new types of funding and evaluate each against the accounting standards and current accounting treatment (as documented in white papers or other forms) to determine whether OCFO’s treatment complies with generally accepted accounting principles and if not, propose changes. The policy should include formal designation of roles and responsibilities as well as internal controls to ensure proper review and approval of conclusions.

  •  
    Status
      Open
      Closed
    2021-FO-0003-001-C

    Once additional data are available, and at least quarterly, reduce the CARES Act PIH prepayment by the amount actually spent by PHAs or an estimated amount with a low level of estimation uncertainty.

  •  
    Status
      Open
      Closed
    2021-FO-0003-001-D

    As part of the validation process for CPD’s accrued grant liabilities, review CPD’s accrued grant liabilities estimation methodology to ensure that it is based on verifiable grantee supporting documentation and all assumptions and variables used for the grant accrual estimate were properly established, supported, and documented.

  •  
    Status
      Open
      Closed
    2021-FO-0003-001-E

    Research the survey responses that resulted in a positive cash on hand balance to determine whether a cash advance exists. If so, the Chief Financial Officer should coordinate with CPD to (1) determine whether the grantees have proper documentation and approvals allowing for cash advances and (2) develop and implement procedures to estimate and account for cash advances for financial reporting purposes.

  •  
    Status
      Open
      Closed
    2021-FO-0003-001-F

    Investigate other methods for validating CPD’s accrued grant liabilities estimate, including the use of other sampling units, which could provide additional relevant information that can be used to produce more reasonable results and reduce estimation uncertainty to a low level.

  •  
    Status
      Open
      Closed
    2021-FO-0003-001-G

    Work with the Director of the Office of Multifamily Asset Management and Portfolio Oversight to ensure that all debt owed to HUD is identified, accurately reported in HUD’s financial records, and properly monitored to ensure compliance with applicable laws and regulations.

Housing

  •  
    Status
      Open
      Closed
    2021-LA-0802-001-A

    Adequately notify homeowners that, due to COVID-19, all FHA refund applications and supporting documents should be sent electronically to avoid delay in processing. This process should include (1) developing and expediting implementation of correspondence sent to homeowners with the application, (2) a notice of operational changes on HUD’s FHA refunds websites, (3) ensuring that HUD’s Does HUD Owe You a Refund website is updated to the most recent FHA Homeowners Fact Sheet, (4) an updated voice message from the call center including an accurate email, and (5) developing an updated script for call center agents for the initial contact with the homeowner, follow up, and contact with homeowners who already submitted their application by mail.

  •  
    Status
      Open
      Closed
    2021-LA-0802-001-B

    Conduct a privacy impact assessment for accepting homeowner FHA refund applications and supporting documentation that contain PII electronically to identify potential risks and develop and implement plans to mitigate those risks.

  •  
    Status
      Open
      Closed
    2021-LA-0802-001-C

    Develop and implement written policies and procedures for SFIOD to quickly respond to emergency situations when staff cannot return to the office. Procedures should include steps to quickly notify homeowners of any changes made to the FHA refund process.

Office of Administration

  •  
    Status
      Open
      Closed
    2020-OE-0001-17
    Sensitive
    Sensitive

    Sensitive information refers to information that could have a damaging import if released to the public and, therefore, must be restricted from public disclosure.

    The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Chief Information Officer

  •  
    Status
      Open
      Closed
    2020-OE-0001-01
    Sensitive
    Sensitive

    Sensitive information refers to information that could have a damaging import if released to the public and, therefore, must be restricted from public disclosure.

    Prioridad
    Priority

    We believe these open recommendations, if implemented, will have the greatest impact on helping HUD achieve its mission to create strong, sustainable, inclusive communities and quality affordable homes for all.

    Implement a software asset management capability for software and operating systems to ensure that software executes only from the authorized software inventory and all unauthorized software is blocked from executing on HUD's network.


    Status

    In April 2024, the Office of the Chief Information Officer reported that it was in the process of implementing a software management tool that would allow it to control which software is authorized to access the network. This is the first step to create rules for allowing only authorized software to be used through HUD's endpoint security software. Final implementation of this new tool is expected by Quarter 2 of FY 2025.


    Analysis

    To fully address this recommendation, HUD must provide evidence that it has an automated whitelist and implement as per the NIST Special Publication 800-167 or accept the risk and document mitigating measures via a Risk Based Decision memorandum.

    Implementation of this recommendation will result in HUD having the capability to ensure only authorized software is used on HUD’s network based on its software asset listing.

  •  
    Status
      Open
      Closed
    2020-OE-0001-02
    Sensitive
    Sensitive

    Sensitive information refers to information that could have a damaging import if released to the public and, therefore, must be restricted from public disclosure.

    The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

  •  
    Status
      Open
      Closed
    2020-OE-0001-03
    Sensitive
    Sensitive

    Sensitive information refers to information that could have a damaging import if released to the public and, therefore, must be restricted from public disclosure.

    The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

  •  
    Status
      Open
      Closed
    2020-OE-0001-04
    Sensitive
    Sensitive

    Sensitive information refers to information that could have a damaging import if released to the public and, therefore, must be restricted from public disclosure.

    The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

  •  
    Status
      Open
      Closed
    2020-OE-0001-05
    Sensitive
    Sensitive

    Sensitive information refers to information that could have a damaging import if released to the public and, therefore, must be restricted from public disclosure.

    The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

  •  
    Status
      Open
      Closed
    2020-OE-0001-06
    Sensitive
    Sensitive

    Sensitive information refers to information that could have a damaging import if released to the public and, therefore, must be restricted from public disclosure.

    The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

  •  
    Status
      Open
      Closed
    2020-OE-0001-07
    Sensitive
    Sensitive

    Sensitive information refers to information that could have a damaging import if released to the public and, therefore, must be restricted from public disclosure.

    The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

  •  
    Status
      Open
      Closed
    2020-OE-0001-08
    Sensitive
    Sensitive

    Sensitive information refers to information that could have a damaging import if released to the public and, therefore, must be restricted from public disclosure.

    The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

  •  
    Status
      Open
      Closed
    2020-OE-0001-09
    Sensitive
    Sensitive

    Sensitive information refers to information that could have a damaging import if released to the public and, therefore, must be restricted from public disclosure.

    The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.