The Digital Accountability and Transparency Act of 2014 (DATA Act) and implementation guidance provided in the Office of Management and Budget Memorandum M-15-12 mandates that Federal agencies must report their financial, budgetary and programmatic information to the USASpending.gov web site by the statutory May 2017 deadline. In our second of two Data Act Readiness Reviews, OIG reviewed the U.S. Department of Housing and Urban Development’s (...

In accordance with the Chief Financial Officers Act of 1990, as amended, we are required to annually audit the consolidated financial statements of the U.S. Department of Housing and Urban Development (HUD). HUD reissued its fiscal year 2016 and 2015 (Restated) consolidated financial statements due to pervasive material errors that were identified by us. Our objective was to express an opinion on the fairness of HUD’s consolidated...

We reviewed the general and application controls over the Federal Housing Administration’s (FHA) Single Family Premiums Collection Subsystem – Periodic (SFPCS-P) and Single Family Acquired Asset Management System (SAMS) as part of the internal control assessments required for the fiscal year 2016 financial statement audit under the Chief Financial Officer’s Act of 1990.  Our objective was to review the general and application controls over...

We audited the U.S. Department of Housing and Urban Development’s (HUD) computing environment as part of the internal control assessments required for the fiscal year 2016 financial statement audit under the Chief Financial Officer’s Act of 1990.  Our objective was to assess the effectiveness of the controls over the New Core Interface Solution (NCIS) and PRISM™ and the impact of the implementation of release 3 of phase 1 of the New Core...

This report was reissued on February 24, 2017, to correct Appendix A. This reissued report now correctly shows the monetary benefit associated with each recommendation. This report supplements our independent auditor’s report on the results of our audit of HUD’s principal financial statements for the fiscal years ending September 30, 2016 and 2015 (Restated) related to HUD’s internal controls and compliance with applicable laws, regulations,...

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to assess...

We audited HUD’s compliance with the fiscal year 2015 travel and purchase card programs based on our required fiscal year 2014 risk assessment, which determined the U.S. Department of Housing and Urban Development’s (HUD) agencywide charge card program to be at medium risk for fraud. Offices of inspector general are required to (1) conduct periodic assessments of the agency charge card programs, (2) perform analyses or audits as necessary, and...

We audited the functionality of the U.S. Department of Housing and Urban Development’s (HUD) New Core Interface Solution (NCIS) for phase 1, release 3, as part of the internal control assessments required for the fiscal year 2016 financial statement audit under the Chief Financial Officer’s Act of 1990.  Our objective was to determine whether adequate internal controls were in place for the phase 1, release 3, functionality of NCIS and the...

We reviewed the general and application controls over the Federal Housing Administration’s (FHA) Single Family Insurance System (SFIS) and Single Family Insurance Claims Subsystem (Claims) as part of the internal control assessments required for the fiscal year 2015 financial statement audit under the Chief Financial Officer’s Act of 1990. Our objective was to assess the general and application controls over SFIS and Claims for compliance with...

The Digital Accountability and Transparency Act of 2014 (DATA Act), and implementing guidance provided in the Office of Management and Budget Memorandum M-15-12, is a mandate that Federal agencies must follow to report their financial, budgetary and programmatic information to the USASpending.gov web site.  We have reviewed the U.S. Department of Housing and Urban Development’s (HUD) compliance efforts as of July 15, 2016.  To...

This report presents the results of our audit of the U.S. Department of Housing and Urban Development’s (HUD) fiscal year 2015 compliance with the Improper Payments Elimination and Recovery Act of 2010 (IPERA). For the third consecutive fiscal year,  we determined that HUD did not comply with IPERA.  Out of the six requirements, In fiscal year 2015, HUD complied with four (compliance determinations a, c, d, and f) and did not comply...

We conducted an attestation review of the U.S. Department of Housing and Urban Development (HUD), Office of Special Needs Assistance Continuum of Care Program, regarding drug control accounting and associated management assertions for fiscal year 2015.  The objective of our attestation review was to evaluate HUD’s financial reporting and assertions for drug control funds to determine if its reporting was in compliance with regulations and...

We reviewed the general and application controls over the Federal Housing Administration’s (FHA) Single Family Insurance System (SFIS) and Single Family Insurance Claims subsystem (Claims) as part of the internal control assessments required for the fiscal year 2015 financial statement audit under the Chief Financial Officer’s Act of 1990.  Our objective was to evaluate the general and application controls over SFIS and Claims for...

In accordance with the Chief Financial Officers Act of 1990, as amended, we are required to annually audit the consolidated financial statements of the U.S. Department of Housing and Urban Development (HUD) and the stand alone financial statements of the Federal Housing Administration and the Government National Mortgage Administration (Ginnie Mae). Our objective was to express an opinion on the fairness of the financial...

The Federal Information Security Modernization Act of 2014 (FISMA) directs the Office of Inspector General (OIG) to conduct an annual evaluation of the U.S. Department of Housing and Urban Development (HUD) information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and...

We are required to audit the consolidated financial statements of the U.S. Department of Housing and Urban Development (HUD) annually in accordance with the Chief Financial Officers Act of 1990 as amended.  This report supplements our independent auditor’s report on the results of our audit of HUD’s principal financial statements for the fiscal years ending September 30, 2015 and 2014.  Provided are assessments of HUD’s internal...

We reviewed information system controls over the U.S. Department of Housing and Urban Development’s (HUD) computing environment.  This review was conducted as part of the Office of Inspector General’s audit of HUD’s financial statements for fiscal year 2015 under the Chief Financial Officer’s Act of 1990. The OIG has determined that the contents of this report would not be appropriate for public disclosure and has therefore limited its...

Office of Evaluation, IT Evaluation Division (iTED) conducted an evaluation of HUD’s IT Modernization program, which included reviews on the implementation and maturity of HUD’s capital planning and investment control (CIPIC) process and Enterprise Architecture (EA) program. With the corroboration of HUD’s Office of Chief Information Officer (OCIO), the report focuses on three major IT programs and policies within the CPIC and EA programs: IT...

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General (OIG) assisted the U.S. Attorney’s Office for the Eastern District of California in the civil investigation of Iron Mountain, Incorporated, and Iron Mountain Information Management, LLC (Iron Mountain).  Iron Mountain is headquartered in Boston, MA.  The investigation began due to a qui tam[1] filing in the U.S. District Court for the Eastern...

We audited the U.S. Department of Housing and Urban Development’s (HUD) New Core Interface Solution (NCIS) for release 1 of phase 1 as part of the internal control assessments required for the fiscal year 2015 financial statement audit under the Chief Financial Officer’s Act of 1990.  Our objective was to determine whether adequate internal controls were in place for NCIS and to relate the results of the review to the upcoming release 3...