Implement multifactor authentication mechanisms for all privileged users who access information systems that process, store, or transmit PII.

Status

In April 2024, the Office of the Chief Information Officer reported that it has implemented a new software security solution to implement multifactor authentication, had completed 9 of 15 systems within the first phase, and will be delayed in completing the final system until the last quarter of FY 2024.

Analysis

Implementation of this recommendation will result in an enterprise-wide identity and access management solution which addresses the requirements in Executive Order 14028, titled “Improving the Nation’s Cybersecurity”. Users will be required to use multifactor authentication methods to access HUD data, networks, and devices.

Develop and implement an action plan that includes sufficient policies, procedures, and controls that address households living in multifamily housing units having a sufficient supply of safe drinking water […]

Status

As of June 2024, the Office of Multifamily Housing has revised its procedures and related documents and is waiting for final approval.

Analysis

To fully address this recommendation, HUD’s Office of Multifamily Housing must provide evidence of an action plan that includes its procedures that address households living in multifamily housing units to ensure that they have a sufficient supply of safe drinking water. We have not been provided a copy of the final procedures developed; therefore we cannot assess whether they will be sufficient to address the recommendation.

Implementation of this recommendation will enable HUD to have sufficient oversight and control activities in place to ensure households living in multifamily housing units have a sufficient supply of safe drinking water.

Require lenders to obtain the borrowers’ consent to verify the existence of delinquent Federal taxes with the IRS during loan origination and deny any applicant with delinquent Federal tax debt and no payment plan or a noncompliant payment plan or an applicant refusing to provide consent from receiving FHA insurance to put at least $6.1 billion to better use by avoiding potential future costs to the FHA insurance fund.

Status

As of October 2023, the Office of Single Family Housing reported it will need additional tax information from the Internal Revenue Service to complete the planned action, and that the Office of the Chief Financial Officer will assist the Office of Single Family Housing. As of June 2024, no new update has been reported.

The final action target date was May 23, 2024, but was updated in June 2024 to May 23, 2025.

Analysis

To fully address this recommendation, HUD will need to provide evidence that it established a method of borrower consent to verify the existence of delinquent federal taxes.

Implementation of this rule should result in HUD putting $6.1 billion to better use.

Implement a change to regulations at 24 CFR Part 203 to require curtailment of preforeclosure interest and other costs that are caused by lender servicing delays, resulting in $413,513,975 in funds to be put to better use. This should include updating or seeking statutory authority to update HUD’s regulations as necessary and coordinating with HUD’s Office of Finance and Budget, well before any changes go through departmental clearance, to ensure that planned curtailment requirements can be consistently enforced through the claims process.

Status

This audit recommendations cannot be closed out without the publication of the Federal Housing Administration (FHA): Maximum Claim Rule. The proposed changes have been on HUD’s regulatory agenda since Spring 2020 but, as of June 2024, the Office of Single Family Housing does not have an estimated publication date.

Analysis

To fully address this recommendation, HUD must publish the FHA Maximum Claim Rule.

Implementation of this rule should result in HUD putting $413 million to better use.

Develop a method for using the Do Not Pay portal during the underwriting process to identify delinquent child support and delinquent Federal debt to prevent future FHA loans to ineligible borrowers to put $1.9 billion to better use.

Status

The Office of Housing has approved prioritization of funding for Integration between Do Not Pay portal and CHUMS. Funding was allocated to the CHUMS IT contractor on January 26, 2024, to integrate Treasury’s Do Not Pay system with CHUMS, and the IT development project was kicked off the week of February 5, 2024.

As of June 2024, the Office of Single Family Housing reported that it is working with OCIO and Treasury on the business needs for the project, and estimated that the project would be complete by September 30, 2024.

Analysis

To fully address this recommendation, HUD must provide evidence that it has implemented applicant screening against the Do Not Pay portal to identify delinquent child support and delinquent Federal debt to prevent future FHA loans going to ineligible borrowers.

Implementation of this rule should result in HUD putting $1.9 billion to better use.

Issue a change to regulations at 24 CFR Part 203, which would avoid unnecessary costs to the FHA insurance fund, allowing an estimated $2.23 billion to be put to better use. These changes include (1) a maximum period for filing insurance claims and (2) disallowance of expenses incurred beyond established timeframes.

Status

This audit recommendations cannot be closed out without the publication of the Federal Housing Administration (FHA): Maximum Claim Rule. The proposed changes have been on HUD’s regulatory agenda since Spring 2020 but, as of June 2024, the Office of Single Family Housing does not have an estimated publication date.

Analysis

To fully address this recommendation, HUD must publish the FHA Maximum Claim Rule.

Implementation of this rule should result in HUD putting $2.23 billion to better use.