As part of the validation process for CPD’s accrued grant liabilities, review CPD’s accrued grant liabilities estimation methodology to ensure that it is based on verifiable grantee supporting documentation and all assumptions and variables used for the grant accrual estimate were properly established, supported, and documented.

Establish a formal policy addressing HUD’s federal awarding agency responsibilities under 2 CFR § 200.513(c). The policy should identify those involved in the process and their roles in addressing this single audit oversight function. The policy should also address how it will be carried out and documented.

Establish change management and periodic reviews of control activities to ensure regulatory changes, such as Fiscal Service updates to the USSGL, are identified, analyzed, and assessed for potential needed changes to FHA’s established processes.

Establish and ensure appropriate and effective communication protocols between OFAR, FHA, and HUD’s Office of Budget to ensure (1) funding type is clearly indicated within the SF 132 and clear communications are made in differentiating between definite and indefinite borrowing authority, (2) legislative changes in FHA’s borrowing authority are vetted with OMB to ensure appropriate treatment, and (3) – draft SF-133s are reviewed and vetted with HUD and FHA’s budget officers prior to OFAR’s finalization with Treasury and OMB.

Establish internal control procedures around the borrowings process to include verifying sufficient borrowing authority exists within the SF 132, prior to executing the borrowing request. Such verification should also be included as part of the borrowing review and approval controls.

Receive a final opinion from HUD’s Office of the Chief Financial Officer’s Appropriation Law Division on whether FHA was in violation of the Antideficiency Act.

Implement procedures to enhance the review of all journal entries recorded in the general ledger by requiring a two-level review that includes the review of source documents for the journal entry (for example, the OMB approved SF 132).

Strengthen controls over the preparation of the SF 132 to the SF 133 reconciliation by preparing such reconciliations (1) first, with the unadjusted trial balance and later, with the adjusted trial balance and (2) at the fund level, with detailed documentation of differences, and with sufficient detailed explanations that describe the general ledger impact of the differences.

Perform a thorough review of the SF 132 to SF 133 reconciliations and work with Financial Analysis and Controls Division and other divisions and groups to resolve material reconciling items timely.

Coordinate with the Deputy Assistant Secretary for Single Family Housing and HUD’s Office of the Chief Procurement Office (OCPO) in developing effective communication channels between FHA’s NSC and OFAR, and in developing effective monitoring controls to ensure the timely identification and remediation of issues, such as unprocessed documentation and inaccurate records, which may impact the balances reported within FHA’s financial statements.

Develop effective detective controls to ensure HECM loan receivables are accurate and complete, exist, and FHA appropriately holds or controls the rights to any collateral property in connection with the receivable.

Develop and implement procedures to review the reasonableness of the amounts included in the Missing Documents Report before recording the reclassification entry. Include steps to be followed if the amounts in the report do not appear reasonable.

Coordinate with the NSC to take all the actions necessary required by HUD Handbook 4000.1 to ensure that FHA’s interests are protected with respect to the partial claims for which FHA has not received the original promissory note and recorded mortgage.

Coordinate with the NSC to conduct a detailed review of the HECM assigned notes portfolio to identify and record all default events that have occurred to date and initiate collection proceedings in accordance with the applicable HUD Handbooks.

Coordinate with the NSC and the OCPO to determine whether the information technology system could be enhanced to track the annual payment of state property taxes for the HECM portfolio.

Update HUD Handbook 8024.01, REV-2, and regional intake policies and procedures as necessary to include (1) minimum requirements that all regions follow for documenting in HEMS attempts to reach out to claimants when additional information is needed before closing inquiries; (2) policies and procedures for collecting, recording, and documenting all relevant electronic intake information in HEMS; and (3) clarifying that communications with claimants regarding inquiry closure, requests for additional information, and notices of jurisdiction information clearly inform the claimant of the ability to provide additional information within the statute of limitations.

Develop a process to oversee housing discrimination allegations that FHAP agencies close and do not submit to HUD for dual-filing to ensure that the closure and jurisdictional determinations are consistent with the Fair Housing Act. To help address this recommendation, HUD should consider requiring FHAP agencies to enter data on closed inquiries in HEMS and make updates to FHAP agreements as necessary.

Perform a complete agency-wide fraud risk assessment (which incorporates the fraud risk assessments performed at the program level) and use the results to develop and implement an agency-wide plan to move HUD’s fraud risk management program out of the ad hoc phase.

Status

HUD has made steady progress in building its Fraud Risk Management program. In FY 2024, HUD received Congressional approval to establish the Office of the Chief Risk Officer (OCRO). With its Fraud Risk Management Policy in place since 2022, OCRO worked with the HUD Risk Management Council to develop the Department’s approach and establish a cross-functional approach for Fraud Risk Management program accountability. The CRO also completed a fraud risk exposure assessment method that enables the Department to provide a risk-based approach to prioritize program fraud risk assessments and a department-level Fraud Risk Management Playbook to align HUD’s cross-functional activities and accountability to the GAO Fraud Risk Framework and CFO Council practices. The CRO is also working on tools and templates that are being customized for HUD program offices to help them complete their fraud risk assessments. Priority program offices are targeted to complete fraud risk assessments in 2025.

Analysis

While HUD has made progress in the area of fraud risk management, there is still work to be done for HUD to complete an entity-wide fraud risk assessment. HUD's exposure analysis will help it to determine where to focus its efforts. The Department still needs to conduct program-specific fraud risk assessments. Based on the demonstration by Multifamily Housing (MFH), we believe that MFH has made great progress in its fraud risk assessment, and we are encouraged that it has identified areas of weakness that it plans to target. However, Public and Indian Housing (PIH) and Community Planning and Development (CPD) have not been able to demonstrate progress in this area. We believe that the tools and templates the OCRO is developing, along with the continued support, will help PIH and CPD to complete these assessments.

To fully address this recommendation, HUD must provide evidence that it has performed an agency-wide fraud risk assessment performed at the program level, adopted and implemented its fraud risk assessment program departmental policy, and that each HUD program office has established office-specific risk programs.

Develop and implement a procedure to collect and analyze reported suspected instances of fraud, along with other relevant data points, that can be leveraged to develop more robust antifraud risk mitigation tools.

Communicate to HUD program staff the differences between HUD’s enterprise risk management, PIIA, and financial risk management risk assessment processes to ensure an understanding of their roles and responsibilities within HUD’s fraud risk management program.