The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation…

We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the Geospatial Data Act of 2018 (the Act). Our audit objective was to determine whether HUD met the 13 responsibilities stated in the Act with regard to its collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data.  The Act also generally requires covered agencies provide access to geospatial…

We audited the U.S. Department of Housing and Urban Development’s (HUD) grant closeout processes and compliance with the Grants Oversight and New Efficiency (GONE) Act.  The GONE Act required that we conduct a risk assessment to determine whether an audit of HUD’s grant closeout process was warranted.  We initiated this review based on the results of our risk assessment conducted in fiscal year 2018, which found that an audit…

We contracted with the independent public accounting firm of CliftonLarsonAllen LLP (CLA) to audit the financial statements of HUD as of and for the fiscal years ended September 30, 2021 and 2020,1 and to provide reports on HUD’s 1) internal control over financial reporting; and 2) compliance with laws, regulations, contracts, and grant agreements and other matters, including whether financial management systems complied substantially…

We contracted with the independent public accounting firm of CliftonLarsonAllen LLP (CLA) to audit the financial statements of FHA as of and for the fiscal years ended September 30, 2021 and 2020, and to provide reports on FHA’s 1) internal control over financial reporting; and 2) compliance with laws, regulations, contracts, and grant agreements in its financial reporting.  Our contract with CLA required that the audit be…

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) ability to effectively complete information technology (IT) acquisitions.  HUD’s IT systems and its modernization plans depend heavily on contractors, yet HUD has historically faced significant challenges with implementing effective acquisition processes. Therefore, HUD’s acquisition capacity represents a key potential risk within HUD’s IT environment. We…

In February 2021, the Office of the Chief Information Officer (OCIO) identified funding risks with the development contract under which HUD contracted for Federal Housing Administration (FHA) Catalyst’s development.  In response, HUD officials took steps to slow FHA Catalyst spending on the contract while awaiting approval for additional contract funds.  Despite efforts to slow project spending, it was not enough to prevent…

The Chief Financial Officers Act of 1990 (Public Law 101-576), as amended, requires the Office of Inspector General to audit the financial statements of the Government National Mortgage Association (Ginnie Mae) annually. Attached are the U.S. Department of Housing and Urban Development (HUD), Office of Inspector General’s (OIG) results of the audit of Ginnie Mae fiscal years 2021 and 2020 financial statements and reports on internal…

In accordance with the statutory requirements of the Digital Accountability and Transparency Act of 2014 (DATA Act) and standards established by the Office of Management and Budget (OMB) and the U.S. Department of the Treasury, we audited the U.S. Department of Housing and Urban Development (HUD), Office of the Chief Financial Officer’s (OCFO) compliance with the DATA Act for the third quarter of fiscal year 2020.  The audit was…

We conducted this engagement in coordination with the Pandemic Response Accountability Committee (PRAC) to gain an understanding of the U.S. Department of Housing and Urban Development’s (HUD) fraud risk management practices and develop an inventory of fraud risks that HUD had not already identified for the funds appropriated by the Coronavirus Aid, Relief, and Economic Security (CARES) Act for the Community Development Block Grant (…