The Federal Information Security Modernization Act of 2014 (FISMA) requires all Federal agencies to conduct independent penetration tests and vulnerability assessments on a sampling of information systems annually. In conjunction with our fiscal year 2022 FISMA evaluation (2022-OE-0001), we conducted a targeted penetration test and vulnerability assessment of sample systems that resulted in a Topic Brief. The objective of this testing was to determine whether the U.S. Department of Housing and Urban Development (HUD) sample systems and their supporting infrastructure contained security weaknesses. We identified potential vulnerabilities among the tested applications that HUD should review as part of its cybersecurity program and prioritize remediation of risks deemed critical, high, or medium. No formal recommendations were documented in the report. The OIG has determined that the contents of this report would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
An official website of the United States government Here’s how you know
The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.
The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.