We audited the HUD Office of Housing Counseling to assess its processes for achieving its goal to advance homeownership through prepurchase and postpurchase homeownership counseling, including its use of performance metrics and the collection and use of outcome data.  We selected this review because housing counseling plays a significant role in improving housing outcomes for home buyers, homeowners, and renters.HUD’s Office of…

We audited loanDepot.com to evaluate its quality control (QC) program for originating and underwriting Single Family Federal Housing Administration (FHA)-insured loans.  We selected loanDepot for review based on its loan volume and delinquency rate and because its rate of self-reporting loans to HUD when it identified fraud, material misrepresentations, and other material findings that it could not mitigate was below average for…

We performed an audit of CMG Mortgage, Inc., to evaluate its quality control (QC) program for originating and underwriting Single Family Federal Housing Administration (FHA)-insured loans.  We selected CMG for review based on its loan volume and delinquency rate and because its rate of self-reporting loans to HUD when it identified fraud, material misrepresentations, and other material findings that it could not mitigate was below…

The OIG evaluated the U.S. Department of Housing and Urban Development’s (HUD) progress in applying zero trust security principles to protect personally identifiable information (PII).  HUD maintained a significant number of records that contain PII with limited zero trust controls in place to secure these data.  In FY 2022, HUD established a zero trust implementation plan to help the agency address the five zero trust…

The OIG evaluated the U.S. Department of Housing and Urban Development (HUD) Office of Housing’s (Housing) progress in applying zero trust security principles to protect personally identifiable information (PII) within the Federal Housing Administration (FHA) Catalyst system.HUD was in the beginning stages of implementing zero trust requirements for the data and identity pillars. HUD Office of Housing systems, including FHA Catalyst,…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to…

 The Geospatial Data of 2018 (the Act) governs the collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data of covered agencies, including the U.S. Department of Housing and Urban Development (HUD).  We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the geospatial data requirements stated in the Act.  The Act requires the Inspector…

We audited HUD’s management of its FHA appraiser roster to determine whether the roster was accurate and reliable.  We selected this review because a prior audit identified weaknesses related to roster oversight and because this topic aligns with HUD’s strategic goals related to promoting home ownership and strengthening its internal capacity, as well as increased interest in the appraisal process.  HUD’s FHA appraiser…

We audited the Puerto Rico Housing Finance Authority’s (PRHFA) Homebuyer Assistance Program (HBA), which provides eligible applicants with closing costs and downpayment assistance for the purchase of a primary residence.  The U.S. Department of Housing and Urban Development (HUD) provided its grantee, the Puerto Rico Department of Housing (PRDOH), $495 million in Community Development Block Grant Disaster Recovery funds for HBA…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to…

We audited the U.S. Department of Housing and Urban Development (HUD), Office of Single Family Housing’s Federal Housing Administration (FHA) Resource Center’s handling of housing discrimination inquiries.  We initiated the audit to assist HUD with ensuring that the FHA Resource Center (1) provided accurate and complete information on potential housing discrimination to its customers and (2) ensured that instances of potential…

We audited the U.S. Department of Housing and Urban Development’s (HUD) temporary policy for endorsement of loans with COVID-19 forbearance activity because an analysis of data in HUD’s systems showed that there may have been loans that did not comply with the policy’s requirements.  The policy was one aspect of HUD’s broader emergency response to COVID-19, which also included an eviction moratorium and loan forbearance for…

We conducted this evaluation to assess the maturity of HUD’s Robotic process automation (RPA) activities and determine whether HUD had implemented related controls to address technology and program management risks.  RPA is a software technology used to emulate human actions on a computer.  RPA software programs, referred to as “bots,” can complete repetitive tasks quickly and consistently, freeing up employees to work on…

We audited the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) infrastructure to support mandatory telework. During mandatory telework, more employees simultaneously needed remote access to HUD’s network and agency resources for an extended period, which presented unique risks and security requirements. While HUD is no longer operating under mandatory telework, understanding the challenges it faced…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation…

We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the Geospatial Data Act of 2018 (the Act).Our audit objective was to determine whether HUD met the 13 responsibilities stated in the Act with regard to its collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data.  The Act also generally requires covered agencies provide access to geospatial data…

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) ability to effectively complete information technology (IT) acquisitions.  HUD’s IT systems and its modernization plans depend heavily on contractors, yet HUD has historically faced significant challenges with implementing effective acquisition processes. Therefore, HUD’s acquisition capacity represents a key potential risk within HUD’s IT environment. We…

In February 2021, the Office of the Chief Information Officer (OCIO) identified funding risks with the development contract under which HUD contracted for Federal Housing Administration (FHA) Catalyst’s development.  In response, HUD officials took steps to slow FHA Catalyst spending on the contract while awaiting approval for additional contract funds.  Despite efforts to slow project spending, it was not enough to prevent…