The OIG evaluated the U.S. Department of Housing and Urban Development’s (HUD) progress in applying zero trust security principles to protect personally identifiable information (PII).  HUD maintained a significant number of records that contain PII with limited zero trust controls in place to secure these data.  In FY 2022, HUD established a zero trust implementation plan to help the agency address the five zero trust…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to…

We audited HUD and its grantees’ monitoring of subrecipients and contractors in HUD’s Emergency Solutions Grants Coronavirus Aid, Relief, and Economic Security Act (ESG-CV) program to assess subrecipient monitoring in the program.  ESG and ESG-CV grantees often rely on subrecipients and contractors to carry out ESG-CV-funded activities on behalf of the grantees, and are required to monitor subrecipients to ensure that the…

We audited the Housing Authority of the City of Los Angeles’ management of lead-based paint and lead-based paint hazards in its public housing units.  We selected the Authority based on our assessment of the risks of lead‐based paint in public housing agencies’ (PHA) housing developments, including the age of buildings, the number of units, household demographics, and reported cases of childhood lead poisoning.  The audit…

We audited the California Department of Housing and Community Development (HCD) with the objective of evaluating HCD’s fraud risk management practices for its Emergency Solutions Grants Coronavirus Aid, Relief, and Economic Security Act (ESG CARES Act) program and assessing the maturity of its efforts to prevent, detect, and respond to fraud.  Fraudulent activity in the ESG CARES Act program can lead to significant financial…

We audited the U.S. Department of Housing and Urban Development (HUD), Office of Native American Programs’ (ONAP) coronavirus disease of 2019 (COVID-19) recovery programs.  We performed this audit to provide HUD with insight and a nationwide perspective on the challenges that grantees experienced with those programs.  Our audit objectives were to identify 1) the information, guidance, and training HUD provided to the grantees…

We selected the State of California’s 2018 disaster owner-occupied rehabilitation and reconstruction program to audit after an internal risk assessment of disaster grantees showed the grant was newer and had not yet disbursed the majority of its funding.  The State received more than $1 billion for the 2018 disasters.  Our audit objective was to determine what the State is considering and to what extent resilience-based…

We audited the U.S. Department of Housing and Urban Development (HUD), Office of Native American Programs’ (ONAP) Coronavirus Aid, Relief, and Economic Security (CARES) Act and American Rescue Plan (ARP) Act to identify drawdown levels for its block grant programs and assessed information ONAP made publicly available. As of October 4, 2022, grantees had drawn $231.6 million of the $300 million in CARES Act block grant funds and $135.8…

We audited the U.S. Department of Housing and Urban Development’s (HUD) fraud risk management program at the enterprise and program-office levels and assessed its overall maturity.  Our objective was to determine HUD’s progress in implementing a fraud risk management framework at the enterprise and program-office levels that encompasses control activities to prevent, detect, and respond to fraud. The Antifraud Playbook…

We performed a review of the U.S. Department of Housing and Urban Development’s (HUD) monitoring and tracking of Continuum of Care (CoC) grantees that have been slow to spend their grant funds.  Our objectives were to determine whether HUD was effectively tracking and monitoring CoC grant spending and to determine the impact of COVID-19 on CoC grantee spending. HUD generally tracked and monitored its grantees; however, it did not…

We audited the U.S. Department of Housing and Urban Development (HUD), Office of Native American Programs’ sale of defaulted loan notes and real estate-owned (REO) properties on tribal trust and other restricted lands. We performed this audit as a result of congressional interest in the Section 184 program and work performed during prior HUD, Office of Inspector General, audits. The objective of our audit was to determine whether HUD…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation…

We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the Geospatial Data Act of 2018 (the Act). Our audit objective was to determine whether HUD met the 13 responsibilities stated in the Act with regard to its collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data.  The Act also generally requires covered agencies provide access to geospatial…

We audited the U.S. Department of Housing and Urban Development’s (HUD) Community Development Block Grant Coronavirus Aid, Relief, and Economic Security (CARES) Act program. Our audit objective was to determine what challenges grantees faced in using program funds for activities that prepare for, prevent, or respond to the coronavirus and its impact.  We used a survey questionnaire to gather feedback and insight directly from 1,…

We audited the U.S. Department of Housing and Urban Development’s (HUD) oversight of its public housing agencies’ (PHA) reasonable accommodation policies and procedures.  We initiated this audit because we identified an increase in housing discrimination complaints based on a failure to provide a reasonable accommodation, even as the total number of all housing discrimination complaints was decreasing.  Our audit objective…

We audited the Los Angeles Homeless Services Authority’s Continuum of Care (CoC) program.  The audit was initiated because of the homelessness crisis in the City of Los Angeles, which has the highest number of unsheltered people in the United States.  In addition, the Los Angeles city controller issued a report in 2019, criticizing the Authority for falling short of City of Los Angeles homeless outreach goals.  (See…

We audited the U.S. Department of Housing and Urban Development’s (HUD) oversight of Federal Housing Administration (FHA) refunds based on a hotline complaint alleging that HUD was trying to make it difficult for claimants to obtain refunds or discourage them from pursuing the refunds, which are due to eligible homeowners from the unearned portion of the upfront mortgage insurance premium paid.  Our audit found the allegations…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General (OIG), completed a corrective action verification (CAV) of recommendations from four prior home equity conversion mortgage (HECM) audit reports.  The CAV was initiated because protecting the Federal Housing Administration (FHA) mutual mortgage insurance fund is one of HUD’s top management challenges.  The prior audits determined that HUD…

We conducted this evaluation due to the growing homeless crisis and the U.S. Department of Housing and Urban Development’s (HUD) establishing a goal of ending homelessness.  Our objective was to evaluate the challenges that participating public housing agencies (PHA) face in meeting the goals and objectives of the HUD Veterans Affairs Supportive Housing (VASH) program. The results from our limited review may help HUD in…

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) modernization roadmap.  A significant number of HUD’s mission-essential applications have not been modernized, which presents multiple sources of risk.  These applications are hosted on legacy information systems and mainframe platforms, which are operationally inefficient, increasingly difficult to secure, and costly to…