Retention is a shared responsibility between the U.S. Department of Housing and Urban Development’s (HUD) Office of the Chief Human Capital Officer (OCHCO) and HUD’s other program offices.  OCHCO sets the departmentwide retention strategy, while the program offices have responsibility for managing retention within their offices.  Our evaluation determined that HUD’s departmentwide retention strategy in fiscal years (FY) 2019-2022…

We have completed our fiscal year (FY) 2023 Federal Information Security Modernization Act of 2014 (FISMA) penetration test and vulnerability assessment.  The objective of this evaluation was to test and verify the technical implementation of a limited set of security controls on judgmentally selected U.S. Department of Housing and Urban Development (HUD) information systems and applications.HUD demonstrated successes in securely…

From 2001 to 2022, the Community Development Block Grant - Disaster Recovery program provided almost $98 billion to states, cities, counties, and territories to help them recover from disasters.  Administering disaster recovery has been a recurring U.S. Department of Housing and Urban Development (HUD) top management challenge since 2018.  Therefore, we audited the disaster recovery program to determine whether the Office of Community…

We contracted with the independent public accounting firm of CliftonLarsonAllen LLP (CLA) to audit the financial statements of HUD as of and for the fiscal years ended September 30, 2023 and 2022, and to provide reports on HUD’s (1) internal control over financial reporting and (2) compliance with laws, regulations, contracts, and grant agreements and other matters, including whether financial management systems complied substantially with the…

We contracted with the independent public accounting firm of CliftonLarsonAllen LLP (CLA) to audit the financial statements of FHA as of and for the fiscal years ended September 30, 2023 and 2022, and to provide reports on FHA’s (1) internal control over financial reporting and (2) compliance with laws, regulations, contracts, and grant agreements and other matters.  Our contract with CLA required that the audit be performed in accordance…

We contracted with the independent public accounting firm of CliftonLarsonAllen LLP (CLA) to audit the financial statements of Ginnie Mae as of and for the fiscal years ended September 30, 2023 and 2022, and to provide reports on Ginnie Mae’s (1) internal control over financial reporting and (2) compliance with laws, regulations, contracts, and grant agreements and other matters.  Our contract with CLA required that the audit be performed…

We audited the Puerto Rico Department of Housing’s (PRDOH) fraud risk management practices to assess the maturity of its antifraud efforts.  HUD heavily relies on its grantees to detect and prevent fraud, waste, and abuse and PRDOH is HUD’s second largest Community Development Block Grant Disaster Recovery and Mitigation (CDBG-DR and CDBG-MIT) grantee with over $20 billion in block grant funding.  Our objective was to assess PRDOH’s…

We performed an audit examining HUD’s efforts to prevent duplication of benefits when using Community Development Block Grant (CDBG) Disaster Recovery and Mitigation funds.  Our objective was to determine how the U.S. Department of Housing and Urban Development (HUD) assesses the adequacy of grantee procedures to prevent a duplication of benefits, both before and after grant execution. HUD certified grantees’ high-level processes for…

We performed an audit related to the U.S. Department of Housing and Urban Development’s (HUD) Disaster Recovery Data Portal.  The Disaster Recovery Data Portal is a technological solution planned by HUD to facilitate the rapid and secure transmission of data from the Federal Emergency Management Agency (FEMA) to HUD’s Community Development Block Grant Disaster Recovery grantees.  We performed the work because HUD needs a solution to…

We selected the State of California’s 2018 disaster owner-occupied rehabilitation and reconstruction program to audit after an internal risk assessment of disaster grantees showed the grant was newer and had not yet disbursed the majority of its funding.  The State received more than $1 billion for the 2018 disasters.  Our audit objective was to determine what the State is considering and to what extent resilience-based mitigation…

We audited the Virgin Islands Housing Finance Authority’s Non-Federal Match Program for Community Development Block Grant Disaster Recovery (CDBG-DR) funds.  This Match Program was developed to assist non-Federal entities in paying for their share of projects that addressed unmet needs because of the 2017 Hurricanes Irma and Maria.  We initiated this audit due to the $415 million of CDBG-DR funds allocated by the Authority and to…

We audited the Virgin Islands Housing Finance Authority’s monitoring of its Community Development Block Grant Disaster Recovery (CDBG-DR)-funded activities.  We initiated the audit because of the large amount of CDBG-DR funds awarded to the U.S. Virgin Islands for the 2017 disasters and to aid in the U.S. Department of Housing and Urban Development’s (HUD) strategic objective to support effectiveness and accountability in long-term disaster…

We audited the U.S. Department of Housing and Urban Development’s (HUD) Real Estate Assessment Center’s inspection process.  The audit objectives were to determine whether the Center (1) ensured that public housing properties were inspected within required timeframes before the coronavirus disease 2019 (COVID-19) pandemic; (2) could improve its Big Inspection Plan for inspecting high-priority non-National Standards for the Physical…

We audited the U.S. Department of Housing and Urban Development’s (HUD), oversight of Community Development Block Grant Disaster Recovery (CDBG-DR) grantees’ use of program income.  We initiated this audit in accordance with our goal of ensuring and promoting accountability and effectiveness in disaster response and recovery.  Our audit objective was to determine whether HUD ensured that program income generated from disaster funds…

The Office of Evaluation began preliminary research related to the Program Management Improvement Accountability Act (PMIAA) of 2016.  The objective was to determine how HUD has implemented and complied with the requirements of PMIAA.  After completing informational interviews with HUD officials and reviewing related documentation, we have determined that a full evaluation is premature at this time because HUD is still implementing key…

We audited the Office of Community Planning and Development’s (CPD) monitoring and oversight of the Community Development Block Grant - Disaster Recovery (CDBG-DR) program.  The objective of the audit was to determine whether CPD had effectively and efficiently designed its CDBG-DR program requirements and monitoring to ensure that the grantees meet statutory and other Federal low- and moderate-income (LMI) requirements.  Generally,…

We conducted this evaluation to assess the maturity of HUD’s Robotic process automation (RPA) activities and determine whether HUD had implemented related controls to address technology and program management risks.  RPA is a software technology used to emulate human actions on a computer.  RPA software programs, referred to as “bots,” can complete repetitive tasks quickly and consistently, freeing up employees to work on other, higher…

We audited the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) infrastructure to support mandatory telework. During mandatory telework, more employees simultaneously needed remote access to HUD’s network and agency resources for an extended period, which presented unique risks and security requirements. While HUD is no longer operating under mandatory telework, understanding the challenges it faced is key to…

The Federal Information Security Modernization Act of 2014 (FISMA) requires all Federal agencies to conduct independent penetration tests and vulnerability assessments on a sampling of information systems annually.  In conjunction with our fiscal year 2022 FISMA evaluation (2022-OE-0001), we conducted a targeted penetration test and vulnerability assessment of sample systems that resulted in a Topic Brief.  The objective of this…

We contracted with the independent public accounting firm of CliftonLarsonAllen LLP (CLA) to audit the financial statements of HUD as of and for the fiscal years ended September 30, 2022 and 2021, and to provide reports on HUD’s 1) internal control over financial reporting; and 2) compliance with laws, regulations, contracts, and grant agreements and other matters, including whether financial management systems complied substantially with the…