Ensure that the 2017 CDBG-DR procurement policy addresses the establishment of a contract register that, at a minimum, contains the procurement information specified in section 3.8 of HUD’s Buying Right Guide regarding the PRDOH’s acquisitions of goods and services, as well as of its subrecipients and partners.

Establish procurement policies and procedures for the 2008 CDBG-DR grant to ensure compliance with 2 CFR 200.318-326, including but not limited to procedures to ensure full and open competition, supporting independent cost estimates, properly documenting the procurement history, and including required clauses in contracts, among other issues.

Continue to fill its vacancies with qualified and trained staff, thus ensuring that staffing levels remain adequate to administer the 2017 and 2008 CDBG-DR grant funds.

Structure the internal audit division within a framework that can ensure its organizational independence and allow the internal audit activity to fulfill its responsibilities.

Provide additional training and technical assistance to the PRDOH on the development of policies and procedures to ensure that procedures comply with applicable Federal and grant requirements.

Submit supporting documentation showing that contracts and purchase orders complied with Federal and its own procurement requirements and that these were reasonable and necessary costs or reimburse the CDBG-DR program $55,010 from non-Federal funds.

Submit supporting documentation showing that contracts and purchase orders complied with Federal and its own procurement requirements and that these were reasonable and necessary costs or cancel the $361,501 in unpaid obligations related to CDBG-DR funds.

Revise and finalize the procurement procedures to ensure compliance with applicable Federal requirements, including but not limited to procedures to ensure full and open competition, supporting independent cost estimates, properly documenting the procurement history, and including required clauses in contracts, among other issues.

Collaborate with OCFO to review methodologies used to produce grant accrual estimates, to include testing and verification of the resulting accrual estimates.

Implement information security controls over the Section 108 loan guarantee database that prevent and detect unauthorized changes to program data (or implement an updated Section 108 loan guarantee database with information security controls that prevent and detect unauthorized changes to program data).

Test whether a cumulative housing price appreciation (HPA) variable should be added to the probability of prepayment, probability of default, foreclosure timeline, buyout time models, and cure rate assumptions. Ginnie Mae should provide an analysis if it believes that adding an HPA variable would not be appropriate to support its position.

Develop and implement policies and procedures to require a sufficiently granular decomposition analysis that can adequately explain the impact of all the model changes made.

Develop and implement policies and procedures or enhance or clarify, as appropriate, existing policies and procedures that will require additional analyses whenever thresholds are breached or other analyses indicate potential modeling issues.

Document the economic rationale behind unintuitive model coefficients to support that the unintuitive relationships are appropriate.

Document all model assumptions that are undocumented, providing the basis for any assumptions or decisions made when developing each model assumption.

Develop and implement policies and procedures to ensure compliance with model risk management guidance regarding adequate and well-documented model assumptions.

Develop and implement controls that ensure the updating of model documentation when model changes are made.

Improve model documentation by addressing the model documentation deficiencies cited in this report and narrowing or consolidating them into fewer pieces of documentation, as appropriate.

Formalize and define coding best practices within Ginnie Mae’s model governance framework.

Apply coding best practices during model development processes and add a control for reviewing model code for compliance with best practices.