Develop a comprehensive process to ensure that complaints received by HUD’s Multifamily Housing Clearinghouse are resolved in a timely manner.

Status

In October 2023, the Office of Multifamily Housing reported that it had sought funding for system enhancements to coordinate tenant complaints. HUD is transitioning the Multifamily Clearinghouse responsibilities to the Federal Housing Administration (FHA) Resource Center. The FHA Resource Center has a system that will allow tracking and monitoring of customer calls. As of July 11, 2025, the Office of Multifamily Housing requested the closure of this recommendation because it did not receive the requested funding from Congress for system enhancements, and it believes there is no prospect of future funding. Further, its alternative action of using the FHA Resource Center to track and monitor customer calls did not work. Developing a comprehensive process for intaking, monitoring, and tracking health and safety complaints would require a system enhancement or creation of a new system, and HUD has repeatedly attempted to obtain funding from Congress to no avail. OIG is in the process of collaborating with HUD on finding a potential corrective action to resolve the recommendation.

Analysis

To fully address this recommendation, HUD needs to develop a comprehensive process to ensure that complaints received by HUD are resolved in a timely manner.

Implementation of this recommendation will result in a timelier resolution of complaints submitted by those living in multifamily member housing units.

Develop agencywide policies and procedures for the intake, monitoring, and tracking of health and safety complaints.

Status

In October 2023, HUD stated that it will develop policies and procedures for Multifamily properties for the intake, monitoring, and tracking of health and safety complaints it receives. The Office of Multifamily Housing has not yet updated its policies and procedures. With no comprehensive, automated, real-time system in place, there was no direction to give the field staff, Multifamily Clearinghouse, or the Performance Based Contract Administrators other than what they were already doing. HUD was in the process of developing an automated monitoring system in the FHA resource center to allow tracking of individual calls and the call’s subject, such as health and safety. HUD missed the final action target date of December 31, 2022, and a new completion goal was set for February 2025.  As of July 14, 2025, HUD is seeking closure for this recommendation due to unavailability of funds. HUD stated that its issuance of policies and procedures for a comprehensive process was contingent on the development of a tracking system for the complaint process, for which it has repeatedly requested funding from Congress to no avail. OIG is in the process of collaborating with HUD on finding a potential corrective action to resolve outstanding concerns.

Analysis

To fully address this recommendation, HUD must provide evidence that it has developed and implemented policies and procedures for the Multifamily properties for the intake, monitoring, and tracking of health and safety complaints it receives when using the FHA’s automated monitoring system.

Implementation of this recommendation will result in HUD having a more efficient process for taking in, monitoring, and tracking health and safety complaints and aid HUD in more efficiently addressing those complaints.

Implement a software asset management capability for software and operating systems to ensure that software executes only from the authorized software inventory and all unauthorized software is blocked from executing on HUD's network.

Status

HUD previously reported that it was implementing a software management tool with an expected implementation date of quarter 2 of FY 2025; however, between quarter 2 and 3 of FY 2025, HUD personnel has stated that the tool would not meet the agency’s needs. Accordingly, HUD is looking at a new tool to implement this program and collaborating with the DHS continuous diagnostics and monitoring team to analyze options. HUD has not provided an estimated completion date.

Analysis

To fully address this recommendation, HUD must provide evidence that it has an automated whitelist and that the whitelist is implemented per the NIST Special Publication 800-167 or otherwise accept the risk of not controlling access to its network and document mitigating measures via a Risk-Based Decision memorandum.

HUD has defined a requirement in HUD Handbook 3257.1, Rev. 3, “Software License Management Policy” for the Configuration Control Management Board and Technical Review Committee to be responsible for maintaining the list of allowed and prohibited software.  However, a tool to enforce this list is required to implement the recommendation.

The implementation of this recommendation will result in HUD having the capability to ensure only authorized software is used on HUD’s network based on its approved software asset listing.

Implement multifactor authentication mechanisms for all nonprivileged users who access information systems that process, store, or transmit PII.

Status

The Office of the Chief Information Officer reported that it has implemented a new software security solution to implement multifactor authentication, starting with a pilot on 15 FHA systems. In October 2024, HUD received additional funds through the Technology Modernization Fund for this project enterprise-wide. HUD is in the process of conducting baseline surveys for all 200+ systems to determine how to handle systems that need architectural adjustments to utilize the tool. This is assisting HUD in developing an agency-wide implementation plan, which is expected to take several years to implement.

Analysis

To fully address the recommendation, HUD must implement multifactor authentication enterprise-wide.

Implementation of this recommendation will result in an enterprise-wide identity and access management solution. Nonprivileged users will be required to use multifactor authentication methods to access HUD data, networks, and devices.

Implement multifactor authentication mechanisms for all privileged users who access information systems that process, store, or transmit PII.

Status

The Office of the Chief Information Officer reported that it has implemented a new software security solution to implement multifactor authentication, starting with a pilot on 15 FHA systems. In October 2024, HUD received additional funds through the Technology Modernization Fund for this project enterprise-wide. HUD is in the process of conducting baseline surveys for all 200+ systems to determine how to handle systems that need architectural adjustments to utilize the tool. This is assisting HUD in developing an agency-wide implementation plan, which is expected to take several years to implement.

Analysis

To fully address this recommendation, HUD must implement multifactor authentication enterprise-wide.

Implementation of this recommendation will result in an enterprise-wide identity and access management solution. Privileged users will be required to use multifactor authentication methods to access HUD data, networks, and devices.

Develop and implement an action plan that includes sufficient policies, procedures, and controls that address households living in multifamily housing units having a sufficient supply of safe drinking water […]

Status

In April 2022, HUD created draft standard operating procedures to address lead in the water of its multifamily housing units. On May 11, 2023, HUD published its National Standards for the Physical Inspection of Real Estate (NSPIRE) regulations that addressed lead in the water. Further, on June 30, 2023, HUD published its Implementation of National Standards for the Physical Inspection of Real Estate Administrative Procedures, which requires property owners and agents to provide information about water supply providers and water safety alerts, if applicable, prior to the commencement of a Real Estate Assessment Center (REAC) inspection. As a result, the Office of Multifamily Housing is revising its procedures and consulting with the Office of Lead Hazard Control and Healthy Homes (OLHCHH). As of July 2025, the Office of Multifamily has developed standard operating procedures for its field office staff and plans to issue additional guidance to HUD staff and multifamily property owners on addressing lead in the water for multifamily properties. Although the final action target date has passed, the guidance is undergoing HUD's internal review clearance process. However, HUD did not provide an estimated date for issuance of guidance to close the recommendation.

Analysis

To fully address this recommendation, the Office of Multifamily Housing must provide evidence of an action plan or policy that includes procedures to ensure households living in multifamily units have a sufficient supply of safe drinking water.

Implementation of this recommendation will enable HUD to have sufficient oversight and control activities in place to ensure households living in multifamily housing have a sufficient supply of safe drinking water.

Require lenders to obtain the borrowers’ consent to verify the existence of delinquent Federal taxes with the IRS during loan origination and deny any applicant with delinquent Federal tax debt and no payment plan or a noncompliant payment plan or an applicant refusing to provide consent from receiving FHA insurance to put at least $6.1 billion to better use by avoiding potential future costs to the FHA insurance fund.

Status

HUD's Office of Single Family Housing will need additional tax information to complete the planned action. As of July 2025, HUD was seeking closure of the recommendation, stating that the delinquent Federal tax debt information is not systematically available since the Internal Revenue Service (IRS) cannot disclose it for this non-tax administration need and use under current regulations. HUD also maintains that without an automated solution from the IRS, it is not practical for individual borrowers and/or lenders to manually check tax status with the IRS. OIG disagreed with HUD's request for closure and its position is that action is required since delinquent tax debtors are ineligible for FHA loans under existing FHA and Office of Management and Budget (OMB) guidelines. HUD has other opportunities to address the recommendation, which would help put at least $6.1 billion to better use by ensuring that Federal tax delinquencies are appropriately reviewed during loan origination.

Analysis

To fully address this recommendation, HUD will need to provide evidence that it established a method of borrower consent to verify the existence of delinquent federal taxes including, but not limited to one of the options OIG provided, which were (1) lenders obtaining the borrowers' consent to obtain their tax records directly from the IRS or (2) borrowers accessing their own tax information and submitting it to the lenders.

Implementation of this rule should result in HUD putting $6.1 billion to better use.

Implement a change to regulations at 24 CFR Part 203 to require curtailment of preforeclosure interest and other costs that are caused by lender servicing delays, resulting in $413,513,975 in funds to be put to better use. This should include updating or seeking statutory authority to update HUD’s regulations as necessary and coordinating with HUD’s Office of Finance and Budget, well before any changes go through departmental clearance, to ensure that planned curtailment requirements can be consistently enforced through the claims process.

Status

FHA reported that the audit recommendation cannot be closed without the publication of the FHA Maximum Claim Rule.  The proposed changes have been on HUD’s regulatory agenda since Spring 2020 but, as of July 2025, the Office of Single Family Housing does not have an estimated publication date.

Analysis

To fully address this recommendation, HUD must provide evidence that it has published and adopted the rule.

Implementation of this rule should result in HUD putting $413 million to better use.

Develop a method for using the Do Not Pay portal during the underwriting process to identify delinquent child support and delinquent Federal debt to prevent future FHA loans to ineligible borrowers to put $1.9 billion to better use.

Status

The Office of Housing has approved prioritization of funding for Integration between the Treasury’s Do Not Pay portal and HUD’s Computerized Homes Underwriting Reporting System (CHUMS). Funding was allocated to the CHUMS IT contractor on January 26, 2024, to integrate Treasury’s Do Not Pay system with CHUMS, and the IT development project was kicked off the week of February 5, 2024.  As of July 2025, the CHUMS Memorandum of Understanding (MOU) and Interconnection Security Agreement (ISA) with DNP is fully signed. However, the System of Records Notice (SORN) is under review with OMB.  HUD's Office of Privacy is in the process of reaching out to OMB to request comments or permission to publish. The anticipated completion date of the CHUMS interface with DNP is December 31, 2025.

Analysis

To fully address this recommendation, HUD must provide evidence that it has implemented applicant screening against the Do Not Pay portal to identify delinquent child support and delinquent federal debt to prevent future FHA loans from going to ineligible borrowers.

Implementation of this rule should result in HUD putting $1.9 billion to better use.

Issue a change to regulations at 24 CFR Part 203, which would avoid unnecessary costs to the FHA insurance fund, allowing an estimated $2.23 billion to be put to better use. These changes include (1) a maximum period for filing insurance claims and (2) disallowance of expenses incurred beyond established timeframes.

Status

The Federal Housing Administration (FHA) reported that the recommendation cannot be closed out without the publication of the FHA Maximum Claim Rule. The proposed changes have been on HUD’s regulatory agenda since Spring 2020 but, as of July 2025, the Office of Single Family Housing does not have an estimated publication date.

Analysis

To fully address this recommendation, HUD must publish the FHA Maximum Claim Rule.

Implementation of this rule should result in HUD putting $2.23 billion to better use.

Update selection rules for CAIVRS to provide for complete reporting of all ineligible borrowers to put $9.5 million to better use.

Status

In 2020, HUD suspended reporting delinquencies and defaults to the Credit Alert Verification Reporting System (CAIVRS) because these debts are owed to the lender and are not delinquent federal debt.  A debt is not delinquent until payment is overdue to HUD for a deficiency judgment against the borrower in connection with an FHA claim.  Rather than add the missing borrowers to CAIVRS, the Office of Single Family Housing directed HUD’s National Servicing Center to cease including borrower creditworthiness information in CAIVRS and to solely use the system to report deficiency judgments until the delinquent debt is resolved.  HUD provided the Interface Control Document showing what data is sent to CAIVRS related to deficiency judgments.  As of July 2025, OIG is seeking clarification on HUD's implementation and closure of the recommendation because it is not clear whether all deficiency judgments are now being reported in CAIVRS until resolved.  HUD OIG disagrees with the closure of this recommendation until HUD provides evidence that the system updates have been implemented and that they provide complete reporting of all ineligible borrowers.
 

Analysis

To fully address this recommendation, HUD must provide evidence that all deficiency judgments are reported in CAIVRS until resolved.

Implementation of this recommendation should result in HUD putting $9.5 million to better use.