Develop and implement a strategy for collecting and analyzing agency-wide data, to include subrecipient and beneficiary data, to identify trends and potential indicators of fraud across programs.
Publication Report
2023-FO-0001 | October 26, 2022
Improvements are Needed in HUD’s Fraud Risk Management Program
We audited the U.S. Department of Housing and Urban Development’s (HUD) fraud risk management program at the enterprise and program-office levels and assessed its overall maturity. Our objective was to determine HUD’s progress in implementing a… moreRelated Recommendations
Chief Financial Officer
- Status2023-FO-0001-001-AOpenClosedPriorityPriority
We believe these open recommendations, if implemented, will have the greatest impact on helping HUD achieve its mission to create strong, sustainable, inclusive communities and quality affordable homes for all.
Perform a complete agency-wide fraud risk assessment (which incorporates the fraud risk assessments performed at the program level) and use the results to develop and implement an agency-wide plan to move HUD’s fraud risk management program out of the ad hoc phase.
Status
HUD continues to make progress in advancing HUD’s Fraud Risk Management program. HUD issued its Fraud Risk Policy on March 31, 2022. Since then, HUD has integrated fraud risk considerations into risk assessment work completed across HUD, to include processes for Front End Risk Assessments (FERA) and the annual risk profile refresh. Leveraging the history of reports issued by HUD oversight partners, HUD has (1) compiled program level oversight reports to identify fraud risk concerns; (2) initiated a repository to stratify elements of the reports to isolate fraud risk concerns; and (3) isolated trends and themes from the source reports. This baseline work will support the Department’s Fraud Risk Exposure report, due September 2024.
The Chief Risk Officer (CRO) has indicated that it is nearing completion on an entity wide fraud risk exposure analysis. This analysis will tell HUD what programs should be prioritized and reviewed regularly, and which programs can be reviewed less frequently. The programs ranked highest will be first on the list for a full fraud risk assessment and the CRO will lay out a plan and timeline for completing the others. The CRO is also working on a plan to transition from the use of contractor support to full time staff, the plan will occur in phases until 2027, with the first hiring actions occurring soon. The Office of Multifamily Housing (MFH) met with OIG on April 7 to demonstrate the progress they have made on their program-specific fraud risk assessment for the Project Based Rental Assistance Program. MFH expects to complete the assessment by July 15th. the Offices of Public and Indian Housing and Community and Planning and Development have not completed fraud risk assessments, but are working on assigning or hiring staff for dedicated risk management roles.
Analysis
While HUD has made considerable progress in the area of fraud risk management, there is still a lot of work to be done for HUD to complete an entity wide fraud risk assessment. While HUD's exposure analysis will help it to determine where to focus its efforts, HUD still needs to conduct program specific fraud risk assessments. Based on the demonstration by MFH, we believe that MFH has made great progress in its fraud risk assessment and we are encouraged that it has identified areas of weakness that it plans to target. However, PIH and CPD have not been able to demonstrate progress in this area and we do not believe that they will be able to complete program specific fraud risk assessments by 9/30/24.
To fully address this recommendation, HUD must provide evidence that it has performed an agency-wide fraud risk assessment performed at the program level, adopted and implemented its fraud risk assessment program departmental policy and that each HUD program office has established office-specific risk programs/p>
Develop and implement a procedure to collect and analyze reported suspected instances of fraud, along with other relevant data points, that can be leveraged to develop more robust antifraud risk mitigation tools.
Communicate to HUD program staff the differences between HUD’s enterprise risk management, PIIA, and financial risk management risk assessment processes to ensure an understanding of their roles and responsibilities within HUD’s fraud risk management program.
Develop and implement activities to raise awareness of fraud, such as participating in organized antifraud conferences or a newsletter that includes instances of recent fraud in Federal programs.
Collaborate with the Chief Risk Officer to conduct a workforce assessment to determine the level of dedicated full-time staff resources needed by the Chief Risk Officer to effectively (1) administer HUD’s enterprise and fraud risk management programs and (2) support program risk officers by increasing employee and stakeholder awareness of potential fraud schemes that could impact each program respectively.
If the workforce assessment determines that additional staff are needed, work with the Chief Risk Officer to staff the necessary positions.