We audited the U.S. Department of Housing and Urban Development’s (HUD) Office of Multifamily Housing Programs’ monitoring of civil rights compliance.  Robust monitoring for civil rights compliance is critical to HUD’s goals to support underserved communities.  Our audit objective was to assess the extent to which HUD monitored civil rights compliance in its program activities.HUD and performance-based contract administrators…

We audited the Boston Housing Authority’s public housing program to determine whether the physical condition of the Authority’s program units complied with the U.S. Department of Housing and Urban Development’s (HUD) and the Authority’s requirements.  The audit was initiated based on our assessment of risks associated with public housing agencies’ program units and recent media attention and public concern about the condition of…

HUD’s Office of Housing contracts with performance-based contract administrators to administer the housing assistance payments (HAP) contract with owners.  Through RAD, HUD oversees the HAP contracts for converted properties and monitors owners for compliance with HUD’s requirements, which include maintaining (1) units in decent, safe, and sanitary condition and (2) reserve for replacement accounts to help defray the cost of…

The OIG evaluated the U.S. Department of Housing and Urban Development’s (HUD) progress in applying zero trust security principles to protect personally identifiable information (PII).  HUD maintained a significant number of records that contain PII with limited zero trust controls in place to secure these data.  In FY 2022, HUD established a zero trust implementation plan to help the agency address the five zero trust…

The OIG evaluated the U.S. Department of Housing and Urban Development (HUD) Office of Housing’s (Housing) progress in applying zero trust security principles to protect personally identifiable information (PII) within the Federal Housing Administration (FHA) Catalyst system.HUD was in the beginning stages of implementing zero trust requirements for the data and identity pillars. HUD Office of Housing systems, including FHA Catalyst,…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to…

The purpose of this memorandum is to alert the U.S. Department of Housing and Urban Development (HUD) to an issue that the Office of the Inspector General (OIG), has identified that affects the timeliness with which public housing agencies (PHA) with units that have lead-based paint are performing required lead-based paint visual assessments.HUD OIG audited, among other issues, whether three of the nation’s largest…

 The Geospatial Data of 2018 (the Act) governs the collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data of covered agencies, including the U.S. Department of Housing and Urban Development (HUD).  We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the geospatial data requirements stated in the Act.  The Act requires the Inspector…

We audited the Boston Housing Authority’s Housing Choice Voucher (HCV) Program.  We initiated this audit based upon our assessment of risks associated with public housing agencies' HCV Program units, as well as recent media attention and public concern about the conditions of subsidized housing properties.  Our objective was to determine whether the physical conditions of the Authority’s HCV units complied with both the U.S.…

We audited the Housing Authority of the City of Los Angeles’ management of lead-based paint and lead-based paint hazards in its public housing units.  We selected the Authority based on our assessment of the risks of lead‐based paint in public housing agencies’ (PHA) housing developments, including the age of buildings, the number of units, household demographics, and reported cases of childhood lead poisoning.  The audit…

We audited the U.S. Department of Housing and Urban Development (HUD), Office of Multifamily Housing Programs’ efforts to address multifamily mortgage application processing delays.  When applications for these loans are delayed, it slows the production and availability of affordable multifamily housing units.  During the COVID-19 pandemic, HUD took action to eliminate a backlog of over 500 applications waiting to be assigned…

We audited the Cuyahoga Metropolitan Housing Authority’s management of lead‐based paint in its public housing program based on our assessment of the risks of lead‐based paint in public housing.  The risk factors assessed included the age of buildings, the number of units, household demographics, and reported cases of childhood lead poisoning.  Our audit objectives were to determine whether the Authority (1) complied with HUD’…

We audited the Columbus Metropolitan Housing Authority’s Housing Choice Voucher (HCV) Program.  The audit was initiated based on our assessment of risks associated with public housing agencies’ HCV Program units and recent media attention and public concern about the conditions of subsidized housing properties.  Our objective was to determine whether the physical condition of the Authority’s HCV Program units complied with…

We audited the U.S. Department of Housing and Urban Development’s (HUD) oversight of multifamily housing properties with failing Real Estate Assessment Center (REAC) scores or life-threatening exigent health and safety (EHS) deficiencies.  Our objective was to determine whether HUD had effective oversight of multifamily housing properties to ensure that the properties were maintained in decent, safe, and sanitary condition.The…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to…

We audited the U.S. Department of Housing and Urban Development’s (HUD) oversight of the physical condition of public housing developments.  Our audit objective was to assess HUD’s oversight of the physical condition of public housing developments; specifically, whether HUD had adequate oversight of public housing agencies’ (PHA) (1) corrective actions in response to periodic Real Estate Assessment Center (REAC) inspections and (2…

We audited the Stark Metropolitan Housing Authority’s public housing program based on significant deficiencies noted during our prior audit of the Authority.  Our audit objective was to determine whether the Authority complied with Federal and its own requirements for procuring goods and services. The Authority did not always comply with Federal and its own procurement requirements.  Specifically, for the contracts reviewed…

We audited the U.S. Department of Housing and Urban Development’s (HUD) Section Eight Management Assessment Program (SEMAP) based on our report on HUD’s top management challenges for fiscal years 2020 through 2022 and HUD’s strategic goals and objectives reported in its strategic plan for 2018 through 2022.  Our audit objective was to assess the effectiveness of HUD’s SEMAP as a performance measure for the Housing Choice Voucher (…

We conducted this evaluation to assess the maturity of HUD’s Robotic process automation (RPA) activities and determine whether HUD had implemented related controls to address technology and program management risks.  RPA is a software technology used to emulate human actions on a computer.  RPA software programs, referred to as “bots,” can complete repetitive tasks quickly and consistently, freeing up employees to work on…

We audited the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) infrastructure to support mandatory telework. During mandatory telework, more employees simultaneously needed remote access to HUD’s network and agency resources for an extended period, which presented unique risks and security requirements. While HUD is no longer operating under mandatory telework, understanding the challenges it faced…