Identify and provide additional role-based training, guidance, and instructions to CPD employees on how to appropriately handle and safeguard PII encountered during monitoring.

Reinforce the use and admissibility of photographs and videos for evidence collection while remote monitoring.

Identify strategic opportunities to use remote monitoring early in the FY to maximize its responsibility to oversee and monitor its grantees and then use remote monitoring when those opportunities arise.

We recommend that the Director of CPD’s Office of Disaster Recovery review the one grantee with a grant totaling $666,666 that did not meet the overall LMI requirement and address the noncompliance.

We recommend that the Director of CPD’s Office of Disaster Recovery update DRGR’s QPR to include information on the progress towards compliance with the overall LMI benefit based on the total amount of the grant.

We recommend that the Director of CPD’s Office of Disaster Recovery adopt LMI benchmarking to ensure that grantees budget adequate funds to LMI at significant milestones in the grant lifecycle.

We recommend that the Director of CPD’s Office of Disaster Recovery make changes to the action plan process so that the action plan calculates an overall LMI percentage.

Identify short- and long-term plans for the RPA program that align its capabilities, staffing needs, funding projections, and mission needs.

Implement procedures to capture and monitor centralized logs to maintain appropriate visibility into bot activities and provide for auditability of bot actions.

Implement procedures to periodically review RPA system access and remove access for users that are not authorized or no longer have a need to use the system.

Implement procedures to ensure that attended bots use the security rights and credentials of the attending user.

Research, evaluate, and implement technical or alternative solutions to deploy essential computer software updates using appropriate secure methods to ensure that computer security updates occur in a timely manner to minimize risk to HUD’s systems and operations

Research, evaluate, and implement technical solutions to provide additional improvements to VPN and related remote working capabilities of HUD system users.

Perform routine VPN stress tests as part of its contingency planning and testing processes to regularly identify and remediate network performance issues and ensure that network capabilities are sufficient for teleworking.

Research, evaluate, and implement technical solutions to resolve the user account management issues and the underlying issue in the technical environment.

Assess its help desk system against other technical solutions and ensure that the help desk solution used captures complete data on technical support requests. This measure includes but is not limited to ensuring that sequence gaps are properly documented or do not occur, valid transactions are accepted by the help desk system, rejected transactions are identified, and the history of each transaction is retained.

Develop and document internal procedures to ensure that they will address the Program Office’s responsibilities within the departmental grant accrual validation policy.

Re-evaluate and adequately document justification for the establishment of the percentages and other key assumptions used to determine the accrual amount for each program in CPD’s accrued grant liabilities estimate.

Implement written procedures to ensure consistency among field offices in reviewing spending issues, potentially preventing up to an estimated $47 million in annual CoC recaptures.

Design and implement a training program and other development tools to help grantees. The goal of such training would be to provide ideas and other development tools to help the CoCs better provide assistance with implementation of their grants and monitoring of their grantees, including assistance with developing outreach strategies, partnering with community providers, financial budgeting, and best practices. The training should focus on the needs of first-year grantees and CPD should take steps to encourage participation.