Communicate to HUD program staff the differences between HUD’s enterprise risk management, PIIA, and financial risk management risk assessment processes to ensure an understanding of their roles and responsibilities within HUD’s fraud risk management program.

Develop and implement activities to raise awareness of fraud, such as participating in organized antifraud conferences or a newsletter that includes instances of recent fraud in Federal programs.

Develop and implement a strategy for collecting and analyzing agency-wide data, to include subrecipient and beneficiary data, to identify trends and potential indicators of fraud across programs.

Collaborate with the Chief Risk Officer to conduct a workforce assessment to determine the level of dedicated full-time staff resources needed by the Chief Risk Officer to effectively (1) administer HUD’s enterprise and fraud risk management programs and (2) support program risk officers by increasing employee and stakeholder awareness of potential fraud schemes that could impact each program respectively.

If the workforce assessment determines that additional staff are needed, work with the Chief Risk Officer to staff the necessary positions.

We recommend that the Deputy Chief Financial Officer…In collaboration with all involved program offices, develop and implement a sampling methodology that allows for a sample size that reasonably allows for the testing of the complete payment cycle within the PIIA reporting timeframe.

Consult with OMB on the appropriate reporting for the untested portions of the payment cycle (such as reporting as unknown) and report accordingly.

Implement a procedure, which ensures that future improper and unknown payment testing that does not test the full payment cycle is reported in accordance with OMB’s guidance.

Coordinate with OMB to ensure that all of HUD’s data posted on OMB’s PaymentAccuracy.gov are accurate, including data before fiscal year 2021.

Update its procedures to include verifying all HUD data on PaymentAccuracy.gov immediately after the data are published on the public website to ensure that all data are accurate and if not, coordinate any corrections with OMB.

Develop and implement controls for use of the bulk grant closeout process going forward to ensure that grants are closed in accordance with all applicable requirements, including that administrative actions and required work under the grant award have been completed by the grantee before the grant is closed out. These controls should include but not be limited to increased collaboration and communication between headquarters and field offices.

Develop and implement controls to ensure that future grant data reporting to stakeholders is consistent and accurate, including defining how records should be counted and data should be presented and ensuring that accurate POP dates are maintained in HUD’s systems.

As part of the validation process for CPD’s accrued liabilities, improve its validation process to ensure that it is based on verifiable grantees responses and supporting documentation.

We are recommending OCFO reopen the following recommendation reported in audit report 2021-FO-0003-0001-D: 1B. As part of the validation process for CPD’s accrued grant liabilities, review CPD’s accrued grant liabilities estimation methodology to ensure that it is based on verifiable grantee supporting documentation and all assumptions and variables used for the grant accrual estimate were properly established, supported, and documented.

Implement a policy to ensure the federal regulation responsibilities for outgoing HUD employees are reassigned to appropriate HUD personnel to enable HUD to continue to address those federal regulation requirements.

Establish controls to determine if single audits for HUD grantees are being completed and reported in a timely manner in accordance with 2 CFR §200.512.

Provide a means for which HUD grantees and their auditors can request technical advice and counsel.

Establish controls to determine if follow-up is being conducted to determine if the grant recipients have taken appropriate and timely corrective action. That follow-up must include the following: a. Issuing a management decision letter as prescribed in 2 CFR §200.521; b. Monitoring recipients to ensure they are taking appropriate and timely corrective action; c.Using cooperative audit resolution mechanisms (see 2 CFR §200.25) to improve federal program outcomes through better audit resolution, follow-up, and corrective action; and d. Developing a baseline, metrics, and targets to track, over time, the effectiveness of HUD’s process to follow-up on audit findings and on the effectiveness of single audits in improving recipient accountability and their use by HUD in making award decisions.

Establish controls to ensure that HUD provides Office of Management Budget (OMB) annual updates to the compliance supplement6 and works with OMB to ensure that the supplement focuses the auditor to test compliance requirements most likely to cause improper payments, fraud, waste, abuse or generate audit findings for which HUD will take sanctions.

Establish a control to hold HUD’s Single Audit Accountable Official responsible for improving the effectiveness of the single audit process based on single audit metrics that HUD will establish in response to recommendation 4D above.