The HUD Inspector General Office the management procedures, practices, and controls related to the Recovery Act Management and Reporting System (RAMPS) to assess compliance with reporting requirements under the American Recovery and Reinvestment Act (Recovery Act). The audit found that HUD had taken actions to comply with the reporting requirements under the Recovery Act. However, HUD’s effort to implement procedures, practices, and controls related to RAMPS did not fully meet the Recovery Act’s National Environmental Policy Act (NEPA) reporting requirements to ensure that NEPA data were reported to the public in a timely and accurate manner, nor did HUD complete required security and privacy documents before or during the early phase of system development. The report recommends the HUD Chief Information Officer ensure that system owners develop the system security plan and risk assessment early in the development process and that system owners complete a privacy impact assessment for a new system before placing it into development and production.