Review any ongoing time-and-materials contracts and if requirements were not followed, remedy the noncompliance or reprocure the contracts to ensure compliance with HUD requirements.

Ensure that all Authority staff members working with procurements and contract administration receive procurement training on applicable requirements, including the requirements related to cost reasonableness, contract types, the number of bids or quotations, contract provisions, and maintaining documentation to show the history of procurements.

Establish and implement adequate record-keeping procedures to comply with applicable procurement requirements, including a register of all contracts with key information and a checklist for each procurement action, to ensure that it completes required steps and receives all required documentation.

Require lenders to provide evidence of sufficient flood insurance or execute indemnification agreements for the 21 loans in our statistical sample that did not have sufficient flood insurance at the time of our audit to put nearly $1.1 million to better use. (See appendix A.)

Develop a control to detect loans that did not maintain the required flood insurance to put $1.5 billion to better use by avoiding potential future costs to the FHA insurance fund from inadequately insured properties.

Consult with the Office of General Counsel to review the language in the statutes, regulations, and handbooks and if warranted, make adjustments to the forward mortgage handbook to ensure consistency with the statute.

Consult with the Office of General Counsel to review the language in the statutes, regulations, and handbooks and if warranted, make adjustments to the HECM handbook to ensure consistency with the statute and regulation.

Develop and implement controls for use of the bulk grant closeout process going forward to ensure that grants are closed in accordance with all applicable requirements, including that administrative actions and required work under the grant award have been completed by the grantee before the grant is closed out. These controls should include but not be limited to increased collaboration and communication between headquarters and field offices.

Develop and implement controls to ensure that future grant data reporting to stakeholders is consistent and accurate, including defining how records should be counted and data should be presented and ensuring that accurate POP dates are maintained in HUD’s systems.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Define and communicate policies and procedures to ensure that its products, system components, systems, and services comply with its cybersecurity and supply chain risk management (SCRM) requirements.  This recommendation includes (a) identification and prioritization of externally provided systems (new and legacy), components, and services; (b) how HUD maintains awareness of its upstream suppliers; (c) the integration of acquisition processes, tools, and techniques to use the acquisition process to protect the supply chain; and (d) contract tools or procurement methods to confirm that contractors are meeting their obligations.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.