The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Create separate reporting lines between model development and model validation functions so that both critical model functions do not report to OER, are appropriately segregated in accordance with industry guidance, and follow the foundational component of internal control standards.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Designate a Senior Agency Official for Records Management at the Assistant Secretary level or its equivalent.

Update and issue agency formal records policy, including detailed procedures and requirements for completing and maintaining program office and agencywide inventories of systems, records, and PII.

Update and obtain final NARA approval of all HUD records retention schedules, including the Capstone email schedule, to comply with Federal requirements, including OMB M-19-21.

Develop and approve an enterprise strategy to meet all M-19-21 electronic transition requirements.

Issue a formal policy and requirements for managing CUI.

Establish and disseminate a policy on safeguarding or prohibiting the transportation of PII records out of the office for telework purposes.

Complete the development of performance measures and establish a formal records evaluation process to measure the effectiveness and progress of the records management program.

Standardize processes and duties for all RMLOs.

Conduct a staffing resource assessment for the HUD records program and identify any skills gaps or resource needs.