The OIG evaluated the U.S. Department of Housing and Urban Development’s (HUD) progress in applying zero trust security principles to protect personally identifiable information (PII).  HUD maintained a significant number of records that contain PII with limited zero trust controls in place to secure these data.  In FY 2022, HUD established a zero trust implementation plan to help the agency address the five zero trust pillars…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to assess the…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to assess…

We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the Geospatial Data Act of 2018 (the Act). Our audit objective was to determine whether HUD met the 13 responsibilities stated in the Act with regard to its collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data.  The Act also generally requires covered agencies provide access to geospatial data and…

We audited the U.S. Department of Housing and Urban Development’s (HUD) Community Development Block Grant Coronavirus Aid, Relief, and Economic Security (CARES) Act program. Our audit objective was to determine what challenges grantees faced in using program funds for activities that prepare for, prevent, or respond to the coronavirus and its impact.  We used a survey questionnaire to gather feedback and insight directly from 1,047 program…

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) modernization roadmap.  A significant number of HUD’s mission-essential applications have not been modernized, which presents multiple sources of risk.  These applications are hosted on legacy information systems and mainframe platforms, which are operationally inefficient, increasingly difficult to secure, and costly to maintain.…

We audited rent credits that the U.S. Department of Housing and Urban Development (HUD) received from the U.S. General Services Administration (GSA) during fiscal years 2015 through 2018 in exchange for financial contributions for building improvements.  We initiated this audit due to concerns we identified while completing a review of HUD’s use of funds approved by Congress for building improvements.[1]  Our objective was to determine…

We audited selected controls of U.S. Department of Housing and Urban Development’s New Core Interface Solution application as part of the internal control assessments for the fiscal year 2019 financial statement audit.  Our objective was to review the controls for compliance with Federal information system security and financial management requirements. The OIG has determined that the contents of this audit report would not be appropriate…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General (OIG), has completed its risk assessment of HUD’s travel cards as required by the Government Charge Card Abuse Prevention Act of 2012 (Public Law 112-194).  Our objective was to assess the risks of illegal, improper, or erroneous purchases and payments within HUD’s travel card program.  We found that a medium risk was associated with HUD’s travel…

This memorandum report summarizes survey and interview results on the impact mandatory telework is having on U.S. Housing and Urban Development’s (HUD) operations. The HUD Office of Inspector General (OIG) conducted surveys and interviews to evaluate HUD’s use of agency-wide telework in response to the novel coronavirus disease of 2019 (COVID-19) pandemic. The study was designed to provide insights into the types of obstacles that impeded HUD…

We are required to audit the consolidated financial statements of the U.S. Department of Housing and Urban Development (HUD) annually in accordance with the Chief Financial Officers Act of 1990 as amended. Our objectives were to express an opinion on the fair presentation of HUD’s consolidated financial statements and report on HUD’s internal controls over financial reporting and compliance with select provisions of applicable laws,…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General audited HUD’s compliance with the purchase card program requirements for fiscal years 2017 and 2018 based on our risk assessment. Our audit objective was to determine whether HUD maintained accurate records of cardholders and transactions; HUD employees took purchase card training when required; and HUD purchase cards were used for illegal, improper, or…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General audited HUD’s compliance with the travel card program requirements for fiscal year 2018 based on our risk assessment.Our audit objective was to determine whether HUD travel cards were used for potentially illegal, improper, or erroneous purchases and whether travel cards were used when required. We found that out of a sample of transactions that we…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General audited HUD to ensure that public housing agencies (PHA) have access to information in the Federal Do Not Pay system. We performed this audit because the Housing Opportunity Through Modernization Act of 2016 requires HUD to ensure that PHAs have access to information contained in the Bureau of Fiscal Services’ Do Not Pay system established by the Improper…

We initiated our audit in accordance with our strategic goal to provide the U.S. Department of Housing and Urban Development (HUD) with services and products to address vulnerabilities, to provide opportunities for improvements, and to recognize positive outcomes.  The audit objective was to determine whether the HUD Office of Community Planning and Development (CPD) monitored and ensured that its Disaster Relief Appropriations Act, 2013,…

The Federal Government may choose to outsource for products or services using contracts and contractors.  HUD-owned and contractor-supported products and services are core to achieving HUD’s mission.  In FY 2017, HUD awarded 2,338 contracts, modifications, and task orders valued at $3.9 billion.  Specifically, HUD awarded 1,598 contracts totaling $3.1 billion in ultimate contract value for FY 2017.  While 19 HUD offices…

We are required to audit the consolidated financial statements of the U.S. Department of Housing and Urban Development (HUD) annually in accordance with the Chief Financial Officers Act of 1990 as amended. This report supplements our independent auditor’s report on the results of our audit of HUD’s principal financial statements for the fiscal years ending September 30, 2018 and 2017 (restated), related to HUD’s internal controls and…