Deobligate the 101 program obligations totaling $1,967,991.45 identified for deobligation during the fiscal year 2024 OOR that had not been deobligated as of February 28, 2025.

Develop and execute a written agreement with ONDCP on the reporting methodology for the CoC annual numeric targets and actuals that would meet future reporting requirements and comply with the Strategy and timeframe for implementation.

Develop and execute a written agreement with ONDCP on the use of reporting annual numeric targets for the RHP performance measures that would meet future reporting requirements and comply with the Strategy and timeframe for implementation.

Establish and implement formal policies and procedures that include (1) the ONDCP reporting process between HUD’s OCFO and CPD, (2) the process for reporting to ONDCP, (3) references to any written agreements between HUD and ONDCP, and (4) a requirement for periodic reviews of these written agreements to address any changes in administration, roles, responsibilities, reporting programs, reporting requirements, and reporting methodologies.

Develop a policy or update the existing Grants Management Policy to include 1) the process and controls that HUD will use to hold the prime recipients accountable for FFATA compliance and 2) clearly defined roles and responsibilities between OCFO and the program offices to ensure that action is prioritized by the correct responsible parties regarding FFATA compliance.

Work with applicable program offices to develop training materials and tools, such as dashboards, to assist program offices in monitoring their grant portfolios for subaward reporting compliance.

Review whether potential violations of the Antideficiency Act took place because of implementing or enforcing any nondisclosure policies, forms, or agreements that do not include the anti-gag provision as required by law. If it is determined that a violation occurred, the Chief Financial Officer should take disciplinary actions as appropriate and report the identified violations to the oversight authorities, including the HUD Secretary, the President, the Office of Management and Budget, Congress, and the Comptroller General.

HUD OCIO should identify needs to address Federal requirements by performing a gap analysis on its zero trust architecture strategic plan.

HUD OCIO should establish a zero trust architecture implementation plan that includes milestones and resources to address all zero trust pillars.

HUD OCIO should develop system policies and procedures for dynamic access controls that include just-in-time and just-enough access tailored to individual actions and individual resource needs.

HUD OCIO should capture risks that are associated with zero trust architecture implementation and document these risks in its risk register.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.