Systematically evaluate whether control deficiencies identified by the AIR program have affected the accuracy or completeness of HUD’s financial statements. This assessment should include: 
a) Review relevant financial statement line items, disclosure, and account balances for misstatements attributable to ineffective controls;
b) Document the evaluation results, including the rationale for conclusions regarding the presence or absence of misstatements;
c) Make correcting entries to September 30, 2025 balances, as appropriate;
d) Retain supporting analysis for both internal and external review; and
e) Leverage test of balances results to inform remediation efforts.

Work with program offices through remediation activities to determine the underlying causes of the control deficiencies identified by the AIR program.
 

Based on the causes identified, coordinate with the program offices through remediation activities to develop corrective action plans with defined milestones, responsible parties, and timelines. Progress should be tracked, documented, and periodically reported to senior management.
 

Require targeted, role-specific training for program office staff and managers in areas where deficiencies were identified, including approvals, segregation of duties, recordkeeping, and delegated authority. This training should reinforce the importance of compliance with internal control requirements and include HUD escalation and enforcement mechanisms.

Assess and address barriers to timely and adequate responses from program offices during AIR program internal control testing. This assessment should:
a) Identify recurring causes for delayed or incomplete responses from program offices and implement escalation protocols or incentives to ensure timely fulfillment of AIR program requests;
b) Identify and implement efficiencies in the testing process to optimize the time program offices spend on the AIR program, such as streamlining communication, clarifying expectations, finding alternatives to time consuming tasks, and optimizing scheduling;
c) Provide additional guidance, training, or resources to program offices as needed to improve the quality and timeliness of submissions; and
d) Monitor response rates and timeliness, reporting persistent issues to senior leadership for corrective action.

Re-examine and enhance HUD’s process for evaluating the potential financial impact of control deficiencies identified by the AIR program or other sources to ensure that:
a) Assessments of financial impact are initiated promptly upon identification of control deficiencies;
b) The evaluation process is structured to deliver clear, actionable conclusions in sufficient time to inform any necessary adjustments to financial statements prior to the financial report date; and
c) Documentation of the assessment process and results is maintained to support audit requirements and management’s assertions.
 

Coordinate with the Principal Deputy Assistance Secretary for each Program Office to:
a) Define governance protocols to include reassessing HUD’s escalation protocols and enforcement mechanisms for repeated or willful noncompliance with documented controls, such as additional oversight, retraining, or disciplinary action as appropriate. Based on the assessment, update those protocols and mechanisms, as warranted.
b) Establish and resource a HUD-wide centralized digital repository for artifacts and key supporting documentation to provide consistent documentation retention and accessibility. Based on this initiative, define governance protocols for repository use, including security, version control, timely review/update requirements, and periodic audits to validate compliance.
 

Update HUD Handbook 1900.40, Do Not Pay policy, to clearly define the responsibilities for all parties and align it with current laws, processes, and procedures. This should include defining responsibilities for preaward and prepayment verification, and developing a process and governance structure to ensure that preaward and prepayment verification are consistently performed across HUD’s programs.

Status

As of January 2026, HUD has not provided a management decision for this recommendation. While HUD reestablished its computer matching agreement with the Department of Treasury through the Treasury Do Not Pay verification portal, HUD has not developed a policy to define responsibilities going forward.

HUD OIG recently initiated  the annual Payment Integrity Information Act (PIIA) audit for fiscal year 2025. During this audit we will work with HUD to determine the status of this recommendation.

Analysis

Updating the HUD Handbook 1900.40 will define responsible parties for ensuring compliance with the Do Not Pay Initiative (DNP).    

The implementation of this recommendation will result in consistent use of DNP, allowing for instant verification of eligibility across the billions in payments that HUD processes, resulting in the reduction of future improper payments.

Develop a standard operating procedure to ensure that the OCFO is 1) monitoring the DNP Computer Matching agreement to ensure continuity, 2) reporting accurately on its DNP matching, and 3) working with program offices to adjudicate any payments that are identified as potentially improper during the computer matching process.

Work with Multifamily Housing to investigate the 11 of 24 entities with expired SAM.gov registrations to determine if those entities should have received payments totaling $212,208,450 and perform the required follow-up actions once a determination is made.

Deobligate the 101 program obligations totaling $1,967,991.45 identified for deobligation during the fiscal year 2024 OOR that had not been deobligated as of February 28, 2025.

Develop and execute a written agreement with ONDCP on the reporting methodology for the CoC annual numeric targets and actuals that would meet future reporting requirements and comply with the Strategy and timeframe for implementation.

Develop and execute a written agreement with ONDCP on the use of reporting annual numeric targets for the RHP performance measures that would meet future reporting requirements and comply with the Strategy and timeframe for implementation.

Establish and implement formal policies and procedures that include (1) the ONDCP reporting process between HUD’s OCFO and CPD, (2) the process for reporting to ONDCP, (3) references to any written agreements between HUD and ONDCP, and (4) a requirement for periodic reviews of these written agreements to address any changes in administration, roles, responsibilities, reporting programs, reporting requirements, and reporting methodologies.

Develop a policy or update the existing Grants Management Policy to include 1) the process and controls that HUD will use to hold the prime recipients accountable for FFATA compliance and 2) clearly defined roles and responsibilities between OCFO and the program offices to ensure that action is prioritized by the correct responsible parties regarding FFATA compliance.

Work with applicable program offices to develop training materials and tools, such as dashboards, to assist program offices in monitoring their grant portfolios for subaward reporting compliance.

Review whether potential violations of the Antideficiency Act took place because of implementing or enforcing any nondisclosure policies, forms, or agreements that do not include the anti-gag provision as required by law. If it is determined that a violation occurred, the Chief Financial Officer should take disciplinary actions as appropriate and report the identified violations to the oversight authorities, including the HUD Secretary, the President, the Office of Management and Budget, Congress, and the Comptroller General.

We recommend that the Chief Financial Officer enhance existing policies to establish a formal grant accrual risk management framework to help ensure consistent standards across HUD with regard to the development, review, and execution of the grant accrual and validation. This framework should include 1) identifying grant accrual estimation risk, assessing the magnitude of this risk, and managing the risks that arise when using certain quantitative estimation methods, 2) a governance structure that includes estimation ownership, oversight, and framework assessment, 3) the creation of a committee that is responsible for establishing a holistic approach to estimation risk management, including key stakeholders from OCFO and program offices, such as CPD, and 4) a requirement for documentation of committee meeting agendas, minutes, and key decisions and discussion points which impacts the various grant accrual methodologies across the Department.

Develop and fully implement a departmentwide policy for the monthly transaction review process that requires program office participation and timely completion of the review and certification.

Update OCFO’s travel card monitoring procedures to obtain, review, and monitor the IBA Use report on a regular basis to ensure compliance with purchases required to be made on the government travel card.