HUD PII Records Protection and Management
Standardize processes and duties for all RMLOs.
Open Recommendation
HUD PII Records Protection and Management
Conduct a staffing resource assessment for the HUD records program and identify any skills gaps or resource needs.
Open Recommendation
HUD Policies Did Not Always Ensure That Borrowers Complied With Program Residency Requirements
Implement control policies or procedures to at least annually coordinate with HUD’s Office of Public Housing to match data in the Single Family Data Warehouse to data in the Public Housing Information Center to prevent or mitigate instances of borrowers violating Program residency requirements by Read More
Open Recommendation
HUD Policies Did Not Always Ensure That HECM Borrowers Complied With Residency Requirements
Implement controls to prevent or mitigate instances of borrowers violating HECM program residency requirements by concurrently participating in the Voucher program, including policies and procedures to at least annually coordinate with HUD’s Office of Public Housing to match borrower data in the Read More
Open Recommendation
HUD Policies Did Not Always Ensure That HECM Borrowers Complied With Residency Requirements
Implement controls to prevent or reduce instances of borrowers violating HECM program residency requirements by concurrently participating in multifamily programs, including policies and procedures to at least annually coordinate with HUD’s Office of Multifamily Housing Programs to match borrower Read More
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Ensure the privacy program is staffed with experienced personnel (such as a Chief Privacy Officer) to manage the operational aspects of the program.
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Issue a notice at the Secretary level delegating and clarifying the authority and responsibilities of the SAOP and Privacy Office
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
A. Document the roles and specific responsibilities of all positions assigned privacy responsibilities. B. Communicate these responsibilities on a recurring basis, at least annually, to individuals holding these positions.
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Implement thorough human capital processes to ensure execution of the HUD privacy program and all its requirements
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Finalize and approve the draft privacy program strategic plan
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Ensure the privacy program is integrated with the enterprise risk program and that privacy risks are incorporated into the agency risk management process
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Establish an executive leadership dashboard to communicate continuous monitoring of key program risks and issues
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
A. Develop an internal privacy program communication plan to describe how privacy issues will be disseminated and best practices will be shared. B. Implement the communication plan
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Develop a dedicated budget to address Privacy Office training needs and initiatives
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Update all privacy guidance to reflect current Federal requirements and processes.
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Implement a formal process for the Privacy Office to issue and communicate privacy guidance, requirements, and deadlines.
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Update and continue to maintain a central collaboration area to include all current privacy program policies, procedures, and guidance
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Establish standard processes to ensure consistent work flow and communications between program office and Privacy Office personnel
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Ensure role-based privacy training is provided to all personnel with privacy responsibilities
Open Recommendation
HUD PRIVACY PROGRAM EVALUATION
Ensure privacy awareness training is provided to all contractor and third party personnel
Open Recommendation