Assess whether HUD’s other extra-large PHAs have mature fraud risk management programs and use the assessment to develop a strategy to reduce the fraud risk exposure to HUD. The strategy should include working with extra-large PHAs to implement appropriate fraud mitigation activities.
Publication Report
2025-FO-1001 | March 07, 2025
The New York City Housing Authority Should Enhance Its Fraud Risk Management Practices
Departments are required by law to develop and maintain governance structures, controls, and processes to safeguard resources and assets. A robust fraud risk framework helps to ensure that programs fulfill their intended purpose and that funds are spent… moreRelated Recommendations
Public and Indian Housing
- Status2025-FO-1001-001-AOpenClosed
Develop a strategy to comprehensively assess and respond to fraud risks across NYCHA. The strategy should identify who within NYCHA is responsible for designing and overseeing activities to prevent and detect fraud. The strategy should also include how NYCHA will (1) assess fraud risks across NYCHA methodically and periodically, (2) create response plans for fraud risks that are identified, and (3) monitor and evaluate the effectiveness of fraud risk management activities. The strategy should also designate fraud risk responsibilities across NYCHA.
- Status2025-FO-1001-001-BOpenClosed
Based on the strategy, (1) complete an assessment of fraud risks across NYCHA, (2) create response plans for fraud risks that are identified, and (3) develop procedures to monitor and evaluate the effectiveness of fraud risk management activities.
- Status2025-FO-1001-001-DOpenClosed
Work with HUD’s Chief Risk Officer to issue a notice to all PHAs explaining that PHAs are responsible for fraud risk management and play a role in fulfilling HUD’s requirement to identify and mitigate fraud risks. This notice should clearly indicate that PHAs should implement fraud risk management, which includes (1) completing an assessment of fraud risks, (2) creating response plans for fraud risks that are identified, and (3) developing procedures to monitor and evaluate the effectiveness of fraud risk management activities.