HUD OCIO and the HUD Chief Risk Officer should coordinate to implement procedures to monitor the effectiveness of cybersecurity risk responses to ensure that risk tolerances are maintained at an appropriate level (derived from metric 5).

HUD OCIO and the Office of Administration should implement procedures to ensure proper validation of media sanitization in accordance with HUD Media Protection Procedures 2.0 (February 2022) and form HUD 1067A, Certification of Sanitization (derived from metric 36).

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

HUD OCIO should ensure that system owners and information system security officers consistently test their ISCPs and upload the test results to CSAM in accordance with HUD’s defined ISCP testing policy (derived from metric 63).

Acknowledge that $7.23 million of the $14.5 million in the attached settlement agreement represents an amount due HUD, less DOJ’s civil debt collection fees.

Develop and implement controls to ensure that policies and procedures for account executives are continually reviewed and updated to reflect changes in Ginnie Mae’s operations.

Develop and implement controls to review issuers to determine the total impact of a large or multiple-issuer default, the maximize-size default Ginnie Mae can adequately execute, and an issuer’s ability to adapt to changing market conditions.

Develop and implement controls to continually assess skills required to meet organizational goals to include a plan to prioritize resources to accommodate changing organizational needs.

Develop and implement training programs to ensure that employee skill levels are developed to meet changing organizational needs to include secondary market training.

Update and synchronize the SOP and the matching procedure. The updates should include notifications that provide issuers with unmatched loans adequate time to take corrective action to comply with the requirements of the MBS Guide to put $903 million to better use by ensuring that the appropriate Read More

Ensure that all necessary information regarding terminated VA loans is included in the matching process.

Develop and implement an agencywide crisis readiness plan addressing likely hazards arising from a crisis. This guidance should include all key elements that meet CIGFO crisis guidance.

We recommend that the Director of HUD’s New York Office of Public and Indian Housing require the Authority to obtain retroactive approval from HUD for the $815,398 in outstanding unauthorized loans made to its nonprofit entity or reimburse its Public Housing Operating Fund from non-Federal funds Read More

We recommend that the Director of HUD’s New York Office of Public and Indian Housing require the Authority to provide documentation to show that $108,061 in property disposition proceeds was used for the activities outlined in its HUD-approved disposition application and modifications or reimburse Read More

We recommend that the Director of HUD’s New York Office of Public and Indian Housing require the Authority to obtain retroactive approval from HUD for the $61,545 in property disposition proceeds used for Rental Assistance Demonstration conversion costs or reimburse its Operating Fund from non- Read More

We recommend that the Director of HUD’s New York Office of Public and Indian Housing require the Authority to reimburse its Operating Fund from non-Federal funds for $11,173 spent on ineligible activities funded by $369 in property disposition proceeds and $10,804 in tenant participation funds.

We recommend that the Director of HUD’s New York Office of Public and Indian Housing require the Authority to strengthen its controls to ensure that $1,074,979 in remaining property disposition proceeds and any outstanding loans and other funds to be repaid will be put to better use as intended Read More

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.