U.S. flag

An official website of the United States government Here’s how you know

The .gov means it’s official.

Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.

The site is secure.

The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Hotline

Report Fraud, Waste and Abuse

The Offices of Audit and Evaluation supervise and conduct independent and objective audits, evaluations, and other reviews of U.S. Department of Housing and Urban Development (HUD) programs and activities to ensure they operate economically, efficiently, and effectively. This page contains links to our audit and evaluation reports and memoranda.

3 items
    Clear all
    Issued Between
    Fiscal Year 2023 Federal Information Security Modernization Act of 2014 Penetration Test Evaluation Report
    We have completed our fiscal year (FY) 2023 Federal Information Security Modernization Act of 2014 (FISMA) penetration test and vulnerability assessment.  The objective of this evaluation was to test and verify the technical implementation of a limited set of security controls on judgmentally selected U.S. Department of Housing and Urban Development (HUD) information systems and applications.HUD demonstrated successes in securely…
    December 20, 2023
    Report
    #2023-OE-0001a
    Fiscal Year 2021 Federal Information Security Modernization Act (FISMA) Evaluation Report
    The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation…
    February 17, 2022
    Report
    #2021-OE-0001
    Fiscal Year 2021 Federal Information Security Modernization Act (FISMA) Evaluation Security Technical Testing Topic Brief
    The Federal Information Security Modernization Act of 2014 (FISMA) requires all federal agencies to conduct independent security technical verification testing on a sampling of information systems annually.  In conjunction with our fiscal year 2021 FISMA evaluation (2021-OE-0001), we conducted a targeted security testing assessment of sample systems that resulted in a Topic Brief.  The objective of this application…
    February 15, 2022
    Topic Brief
    #2021-OE-0001a