Develop and implement a nationwide inspection review protocol, which includes but is not limited to (1) whether field office staff should mark verification of PHA corrections of life-threatening deficiencies in PASS or any future tracking systems, (2) acceptable documentation for offsite verifications, and (3) whether field office staff should discuss or verify corrections of non-life-threatening deficiencies.

Corrective Action Taken

HUD's Office of Field Operations (OFO) created a protocol describing how it would perform quality control reviews of field office oversight of PHAs’ corrections of life-threatening deficiencies. The implementation of this recommendation resulted in HUD creating a protocol that established consistency in the way HUD field office staff monitored public housing agencies’ corrections of life-threatening deficiencies.

Develop and implement training for field offices that addresses reviewing or following up with PHAs about the correction of life-threatening and non-life-threatening deficiencies and how (1) to review physical inspection reports to effectively ensure that PHAs correct physical deficiencies, (2) PHAs should address or correct each type of deficiency observed in the REAC physical inspection report, and (3) to use PASS or any future tracking system.

Corrective Action Taken

As part of the agreed upon management decision, HUD stated that it would provide dates of office hours and specific training related to NSPIRE and the expectations for all types of defects as evidence to close this recommendation. These events will cover: 1) reviewing physical inspection reports to effectively ensure that PHAs correct physical deficiencies, (2) how PHAs should address or correct each type of deficiency observed in the REAC physical inspection report, including life-threatening and severe defects (formerly known as EHS under UPCS) as well as the non-life threatening type, and (3) to use PASS or any future tracking system. Additionally, HUD would provide evidence that training occurred such as logs, sign in sheets, screenshots of total Teams meeting attendees, etc., and copies of the training materials used such as power point slides or meeting handouts.

However, to close the recommendation, HUD provided only a screen print showing that 257 attendees participated in a one-hour training session, held via TEAMs. It did not provide copies of training materials, handouts, or power point slides. Additionally, HUD also did not provide evidence that it has scheduled or held office hours allowing staff to join and ask questions related to life-threatening deficiencies. Therefore, OA objects to the closure of this recommendation.

Implement a system to track field office inspection review activities and create a repository for the support documentation collected to verify the correction of life-threatening deficiencies.

Corrective Action Taken

HUD’s Office of Field Operations (OFO) had created a quality assurance tracker as well as a life-threatening deficiency tracker, which contained data specific to the inspections selected by OFO HQs, for quality assurance reviews. The documentation (photographs, work orders, etc.) of the life-threatening deficiency correction was maintained in HUD’s NSPIRE Salesforce system.

Implementation of the recommendation resulted in HUD creating a system to track HUD field offices’ verifications of PHAs’ corrections of life-threatening deficiencies.

Develop and implement a nationwide protocol for field offices, describing how PHA self-inspections should be reviewed, based on REAC's determination of the number and frequency of PHA self-inspections.

Status

The Office of Field Operations will develop and implement a nationwide protocol for field offices, describing how Public Housing Agency (PHA) self inspections should be reviewed, based on Real Estate Assessment Center’s determination of the number and frequency of PHA self-Inspections. Enforcing the requirements of inspection timing are dependent upon software changes to NSPIRE.

The final action target date is August 15, 2024.

Analysis

To fully address this recommendation, HUD must provide evidence demonstrating that it has implemented control activities to ensure that public housing properties are inspected within required timeframes. Implementation of this recommendation will result in HUD accurately tracking the dates in which public housing properties should be inspected and that they are timely completed.

Update its policy and procedures to define its authority for marketing troubled issuer portfolios and the conditions that must exist to extinguish issuers using rapid relocation.

Corrective Action Taken

As of February 2024, HUD addressed this recommendation in a Management Decision by providing the updated extinguishment SOP, the Rapid Relocation Process Flow, and the Rapid Relocation Extinguishment Process Steps, updated to include the conditions that must be present to execute an extinguishment using rapid relocation. We believe that these guidance enhancements will help Ginnie Mae to reduce exposure to risk when facilitating a sale and transfer of a troubled issuer’s portfolio and ensure that it sells portfolios with limited loss to the Government and with minimal disruption to the mortgage market.

Update its policy and procedures to define what type of information Ginnie Mae may disclose and how it will handle protected information before extinguishment.

Corrective Action Taken

Ginnie Mae provided the updated SOP to clarify data and information handling through all phases of the termination/extinguishment process. Specifically, the updated procedures state that Ginnie Mae does not disclose Issuer or portfolio information within the Rapid Relo process. Ginnie Mae provided clarity in this enhancement that will reduce exposure to risk when facilitating a sale and transfer of a troubled issuer’s portfolio and ensure that it sells portfolios with limited loss to the Government and with minimal disruption to the mortgage market.

Update its Policies and procedures to define how Ginnie Mae will determine the portfolio value and price before Sale.

Corrective Action Taken

Ginnie Mae updated its Rapid Relocation Extinguishment SOP to specify the valuation model for rapid relocations will use the same valuation models as other extinguishment options, including examples of portfolio valuation. We believe this guidance enhancement will help Ginnie Mae to reduce exposure to risk when facilitating a sale and transfer of a troubled issuer’s portfolio and ensure that it sells portfolios with limited loss to the Government and with minimal disruption to the mortgage market.

p> Update its policies and procedures to define how Ginnie Mae intends to identify and evaluate prospective buyers to ensure its ability to absorb the extinguished portfolio before executing the purchase and sale agreement.

Corrective Action Taken

Ginnie Mae updated its Rapid Relocation Extinguishment SOP to require an Impact Analysis Evaluation of each prospective buyer under the Rapid Relocation Extinguishment program. The Impact Analysis Evaluation mirrors similar activities performed on select standard Pool Transfer participants and includes details (such as adjusted net worth, delinquency, loan court and total unpaid principle balance) to confirm prospective buyers are able to absorb the extinguished portfolio before executing the purchase and sale agreement. We believe this guidance enhancement will help Ginnie Mae to reduce exposure to risk when facilitating a sale and transfer of a troubled issuer’s portfolio and ensure that it sells portfolios with limited loss to the Government and with minimal disruption to the mortgage market.

We recommend that the Deputy Chief Financial Officer…In collaboration with all involved program offices, develop and implement a sampling methodology that allows for a sample size that reasonably allows for the testing of the complete payment cycle within the PIIA reporting timeframe.

Status

This recommendation was closed by HUD. However, OIG continues to object to that closure and identifies this as a priority recommendation. After HUD closed this recommendation, it informed OIG that it would not be able to produce estimates of improper payments in these programs for FY 2023 and projected to the Office of Management and Budget that it may not be able to do so until FY 2027, dependent on funding.

For several years, we have reported that HUD was unable to test for improper payments in these programs because the Office of the Chief Financial Officer (OCFO) was unsuccessful in working with the Offices of Public and Indian Housing, Multifamily Housing Programs, and the Chief Information Officer to securely collect program files needed to test payments. This year, OCFO reported that HUD was again unable to complete improper payment testing because it was delayed in implementing a secure platform designed to collect supporting data and documentation and also because of limited staffing resources with technical knowledge of the payment cycles. The lack of proper planning and coordination from leadership in HUD’s program and support offices has prevented HUD from addressing the root causes behind the failure to comply with improper payment laws.

Due to this, HUD OIG issued a management alert to the HUD Deputy Secretary entitled "Action Is Needed From HUD Leadership To Resolve Systemic Challenges With Improper Payments", on January 23, 2024. In response to the Management Alert, the Deputy Secretary stated that she would provide a plan in 30 days. On April 10, 2024, the Chief Financial Officer, Assistant Secretary for Housing, and Principal Deputy Assistant Secretary for Public and Indian Housing (PIH) stated their respective executives have been working together to develop a plan to accelerate HUD’s ability to produce statistically valid estimates. With respect to project-based rental assistance (PBRA), HUD plans to use ongoing data collection for fiscal year (FY) 2023 tier 1 and tier 2 payments to develop a statistical estimate in FY 2024. With respect to PIH-TBRA, in lieu of pursuing an estimate for the FY 2024 reporting cycle, PIH will focus on “its existing efforts to enhance PIH [IT] systems”, which HUD considers to be a more strategic use of resources. It is not clear from HUD’s response what PIH will do differently than it already had planned prior to the management alert as HUD did not provide a detailed plan or timeline for OIG review. As of June 21, 2024, a detailed plan or timeline has not been provided.

Analysis

HUD has been challenged with developing a compliant sampling methodology that can test the full payment cycle and that can be executed within the required timeframes. HUD’s sampling methodology did not test the full payment cycle. Further, the associated sample testing and statistical estimation of improper payments could not be completed in time for the required annual reporting of improper payment estimates in the Agency Financial Report (AFR), normally issued in November. To fully address this recommendation, the sampling methodology should test the full payment cycle, and the associated sample testing and statistical estimation must be completed in time to be included in the AFR.

Implementation of this recommendation will result in HUD better safeguarding taxpayer dollars and decrease improper payments.

Consult with OMB on the appropriate reporting for the untested portions of the payment cycle (such as reporting as unknown) and report accordingly.

Develop a control to detect loans that did not maintain the required flood insurance to put $1.5 billion to better use by avoiding potential future costs to the FHA insurance fund from inadequately insured properties.

Corrective Action Taken

In November 2022, FHA published the Acceptance of Private Flood Insurance for FHA-Insured Mortgages final rule (Docket No. FR-6084-F-02) in the Federal Register and issued Mortgagee Letter 2022-18, Acceptance of Private Flood Insurance for FHA-Insured Mortgages (ML 2022-18). These policy changes not only strengthened Single Family’s Mortgagee requirements regarding flood insurance, but they also introduced the ability for borrowers and Mortgagees to purchase private flood insurance. In January 2023, the sections in ML 2022-18 that pertain to HUD’s forward mortgage programs were superseded by the FHA Single Family Housing Policy Handbook (Handbook 4000.1), adding a requirement that the Mortgagee review all FHA-insured properties annually to determine if the property is located within a Special Flood Hazard Area (SFHA). For properties located within a SFHA, the Mortgagee must ensure flood insurance is in force for the life of the mortgage and that the property has sufficient flood insurance coverage. To ensure compliance with the policy requirements, the Mortgagee must include updated flood insurance information for properties where flood insurance is required in the Servicing and Claims File. In addition, Handbook 4000.1 includes flood insurance servicing policy updates. HUD submitted a revised management decision reflecting this action on June 22, 2023.

Create and implement a knowledge management strategy, such as developing standard operating procedures, reference sheets, and program office fact sheets.

Corrective Action Taken

HUD established and implemented a plan for the unused and unfunded vouchers, aiming to mitigate or prevent additional vouchers from becoming unused and unfunded. PIH's plan included the following, among other actions:

• Determining the scope of HUD's statutory and regulatory authority to offset and reallocate vouchers.
• Issuing Office of Public and Indian Housing Notice 2020-29, titled Guidance for Running an Optimized Housing Choice Voucher Program.
• Continuing the work of HUD's landlord taskforce, engaging in listening sessions with major PHA industry groups, and conducting outreach to increase landlord participation in the HCV Program.
• Developing research by HUD's Office of Policy Development and Research on the best methods for adjusting fair market rents and addressing specific challenges in local communities to increase utilization in the HCV Program.

Create and implement a knowledge management strategy, such as developing standard operating procedures, reference sheets, and program office fact sheets.

Corrective Action Taken

OCHCO developed and implemented client profiles for each HUD program office to address knowledge loss and the need for offices to explain or reexplain their mission and functions. The profiles will serve as a central repository to learn about the various programs and missions of HUD and will allow OCHCO staff, other key HUD program office staff, and HUD’s service provider staff to view critical information for each HUD program office.

Develop an enterprise-wide IT modernization strategy that establishes a framework to align with the IT modernization roadmap.

Corrective Action Taken

HUD OCIO provided evidence of an IT Modernization Strategy with an established framework that aligns with the IT modernization roadmap. The strategy includes all of the requirements of the recommendation and is accessible to HUD employere's through OCIO’s internal website.

For the MF-RAP, PIH-TRA, and CPD-HIM programs, ensure that the program's improper payments rate estimates adequately test for and include improper payments of Federal funding that are made by State, local, and other organizations administering these programs and adequately disclose any limitations imposed or encountered when reporting on improper payments, to a degree that fairly informs users of the respective reported information.

Status

This recommendation was closed by HUD. However, OIG continues to object to that closure and identifies this as a priority recommendation. After HUD closed this recommendation, it informed OIG that it would not be able to produce estimates of improper payments in these programs for FY 2023 and projected to the Office of Management and Budget that it may not be able to do so until FY 2027, dependent on funding.

For several years, we have reported that HUD was unable to test for improper payments in these programs because the Office of the Chief Financial Officer (OCFO) was unsuccessful in working with the Offices of Public and Indian Housing, Multifamily Housing Programs, and the Chief Information Officer to securely collect program files needed to test payments. This year, OCFO reported that HUD was again unable to complete improper payment testing because it was delayed in implementing a secure platform designed to collect supporting data and documentation and also because of limited staffing resources with technical knowledge of the payment cycles. The lack of proper planning and coordination from leadership in HUD’s program and support offices has prevented HUD from addressing the root causes behind the failure to comply with improper payment laws.

Due to this, HUD OIG issued a management alert to the HUD Deputy Secretary entitled "Action Is Needed From HUD Leadership To Resolve Systemic Challenges With Improper Payments", on January 23, 2024. In response to the Management Alert, the Deputy Secretary stated that she would provide a plan in 30 days. On April 10, 2024, the Chief Financial Officer, Assistant Secretary for Housing, and Principal Deputy Assistant Secretary for Public and Indian Housing (PIH) stated their respective executives have been working together to develop a plan to accelerate HUD’s ability to produce statistically valid estimates. With respect to project-based rental assistance (PBRA), HUD plans to use ongoing data collection for fiscal year (FY) 2023 tier 1 and tier 2 payments to develop a statistical estimate in FY 2024. With respect to PIH-TBRA, in lieu of pursuing an estimate for the FY 2024 reporting cycle, PIH will focus on “its existing efforts to enhance PIH [IT] systems”, which HUD considers to be a more strategic use of resources. It is not clear from HUD’s response what PIH will do differently than it already had planned prior to the management alert as HUD did not provide a detailed plan or timeline for OIG review. As of June 21, 2024, a detailed plan or timeline has not been provided.

Analysis

HUD has been challenged with developing a compliant sampling methodology that can test the full payment cycle and that can be executed within the required timeframes. HUD’s sampling methodology did not test the full payment cycle. Further, the associated sample testing and statistical estimation of improper payments could not be completed in time for the required annual reporting of improper payment estimates in the Agency Financial Report (AFR), normally issued in November. To fully address this recommendation, the sampling methodology should test the full payment cycle, and the associated sample testing and statistical estimation must be completed in time to be included in the AFR.

Implementation of this recommendation will result in HUD better safeguarding taxpayer dollars and decrease improper payments.

HUD Office of the Chief Information Officer (OCIO) should finish developing the procedures for the HUD Security Operations Center (SOC) to monitor all inbound and outbound traffic and all HUD network devices.

Corrective Action Taken

HUD OCIO updated its Cybersecurity Incident Response Plan and developed more detection and protection mechanisms to monitor network traffic in its IT environment. These mechanisms include anti-malware agents, data loss prevention, endpoint detection and response, firewalls, and intrusion detection and prevention systems. HUD’s SOC also developed standard operating procedures and playbooks for abnormal traffic alerts triggered by the above tools that are posted internally for SOC personnel to utilize. Addressing this recommendation resulted in improvement of HUD’s networking monitoring process by enhancing visibility into network traffic. It also increased HUD’s incident response program capabilities by ensuring that HUD has a plan to monitor traffic and better detect and respond to security incidents. As part of our regular Federal Information Security Act of 2014 (FISMA) assessments, HUD OIG will continue to assess HUD’s incident response effectiveness and threat detection to ensure HUD addresses new and evolving threats.

Ensure that its staff appropriately determines exemptions from the Lead Safe Housing Rule and documents support of the determinations.

Corrective Action Taken

In June 2023, HUD publicly issued Notice 2023-16, Implementation of National Standards for the Physical Inspection of Real Estate (NSPIRE) Administrative Procedures, providing guidance covering the process and operational requirements for HUD’s public housing programs that clarifies for its staff (1) actions that should be taken by the PHA and (2) documentation that must be provided to support that a housing unit is exempt from the Lead Safe Housing Rule. The guidance describes the process that a PHA or property owners and/or agents must take when a NSPIRE inspection identifies deteriorated paint in a property or housing unit. Specifically, the PHA or property owners and/or agents should first verify that the property or housing unit is considered “target housing,” and if so, determine whether it is exempt from the Lead Safe Housing Rule. If an exemption applies, documentation such as, a lease or other residency agreement that affirms that the property is designated exclusively for occupancy by the elderly or persons with disabilities must be provided to HUD. Other residency agreements could include a HUD-approved designated housing plan, property deed or charter, or occupancy restrictions approved by HUD or the PHA’s board of commissioners. The PHA or property owners and/or agency must also affirm whether children under the age of 6 years reside in the property.

Update its policies and procedures for tracking expenditures related to slow-spending grantees, including steps for assisting the grantees to expedite spending (including the grantee’s steps or actions to address slow spending), identifying the reasons for the delays with the grant, and documenting the outcome of its efforts.

Corrective Action Taken

CPD updated guidance addressing grantee slow spending through technical assistance, including actions grant managers can take when grantee expenditures do not appear to be “on pace” to meet the expenditure deadlines, and demonstrated it is providing technical assistance to grantees during monitoring. CPD also issued an additional Standard Monitoring Findings and Corrective Actions Guide for its staff to promote a consistent framework for crafting monitoring findings and the corrective actions needed to resolve identified deficiencies and prevent future occurrences. This new resource provides general guidance and examples for presenting Finding components in monitoring reports for fourteen topics including, “Failure to Meet Timeliness of Expenditures Requirements.

Enforce the requirement for all HUD web applications and services to be approved and authorized by OCIO. The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Corrective Action Taken

In January 2023, HUD's Office of the Chief Information Officer developed and released a Web Applications Directive to all HUD program offices. This directive described how web applications are defined, approved, inventoried, and maintained, including processes for tracking, and monitoring such applications.