We recommend that HUD’s General Deputy Assistant Secretary for Community Planning and Development implement updated guidance and protocols for monitoring civil rights compliance and require CPD staff to incorporate civil rights monitoring into the risk analysis process.

Implement a plan to annually survey all HUD program offices to identify nondisclosure policies, forms, and agreements issued and to determine whether they include the anti-gag provision as required by WPEA and, as necessary, to take corrective action to ensure that they include the anti-gag provision.

Revise the Ginnie Mae Confidential Information Policy to state that in the future, (a) nondisclosure forms and agreements must include the anti-gag provision as required by law and (b) confidentiality clauses in personnel settlement agreements must include the anti-gag provision if the clause restricts disclosure of any other information beyond the terms and conditions of the agreement itself.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Update the Conveyance, Assignment, and Assumption Agreement to require purchasers to report final property outcomes and identifying information including those of third-party purchasers when applicable.

Enhance data collection and processing controls to ensure consistency in reporting data.

Enhance existing demonstration guidance within the Conveyance, Assignment, and Assumption Agreement to provide further detail regarding documentation retention requirements.

Housing should include zero trust requirements as part of the Housing Strategic Roadmap for Housing Modernization.

HUD OCIO should review its security training program and determine whether it should provide general cybersecurity awareness training to external users of its systems and data (IG FISMA metric 44).

Issue guidance to PHAs clarifying the timing of unit inspections and lead-based paint visual assessments to address the misinterpretation caused by the terms “annual” and “every 12 months.”

Implement a process to identify teleworkers most at risk of receiving incorrect locality payments, verify that their official duty stations are correct and they are reporting to their official duty stations as required, and if necessary, correct their locality payments.

Establish a separate fraud risk management framework or evaluate and build upon its ERM framework by incorporating fraud risk management practices that are consistent with the principles of GAO’s Standards for Internal Control in the Federal Government (Green Book), including developing a fraud risk management framework in alignment with best practices identified in GAO’s A Framework for Managing Fraud Risks in Federal Programs and the Chief Financial Officers Council’s Antifraud Playbook.

Obtain training or technical assistance on the implementation of fraud risk management practices consistent with the principles of GAO’s Standards for Internal Control in the Federal Government (Green Book).

Pursue collection from the applicable owner or reimburse its HCV Program $5,194 from non-Federal funds for HAP that was not properly stopped for two units with outstanding HQS deficiencies.

Provide support showing whether HAP was appropriately stopped for the four units cited in the finding or reimburse or pursue collection of $10,233 from non-Federal funds for HAP to owners with outstanding HQS deficiencies.

Update Handbook 4000.1 to require servicers to share information regarding foreclosure moratoriums with borrowers.

Simplify the process for accessing its FAQs on Single Family’s website, including adding a clickable link on its website home page that will take borrowers directly to the FAQs.

Require the transaction specialist contractor to change its application review process to prevent incomplete applications from being considered during vacant loan sales and that recommendations to approve applications are supported by written analysis.

Implement improved verification checks to prevent participation of restricted entities.

Implement an improved process to review and update program controls before each sale to achieve its mission objectives.