We reviewed information system controls over the U.S. Department of Housing and Urban Development’s (HUD) computing environment.  This review was conducted as part of the Office of Inspector General’s audit of HUD’s financial statements for fiscal year 2015 under the Chief Financial Officer’s Act of 1990. The OIG has determined that the contents of this report would not be appropriate for public disclosure and has therefore limited its…

Office of Evaluation, IT Evaluation Division (iTED) conducted an evaluation of HUD’s IT Modernization program, which included reviews on the implementation and maturity of HUD’s capital planning and investment control (CIPIC) process and Enterprise Architecture (EA) program. With the corroboration of HUD’s Office of Chief Information Officer (OCIO), the report focuses on three major IT programs and policies within the CPIC and EA programs: IT…

We audited the City of High Point’s lead-based paint procurement and eligibility operations.  We selected the Authority based on concerns from the U.S. Department of Housing and Urban Development’s (HUD) Office of Healthy Homes and Lead Hazard Control.  Our audit objective was to determine whether the City administered its lead-based paint hazard control grants in accordance with HUD’s regulations and grant requirements for…

The Office of Evaluation performed preliminary research of the HUD Office of the Chief Information Officer’s (OCIO) management of the agency’s reporting of financial and project information on the Federal IT Dashboard (Dashboard).  The objective of the evaluation was to determine if OCIO processes ensured accurate IT investment information was reported on the Dashboard.  We found that project managers did not consistently follow…

We reviewed information system controls over the U.S. Department of Housing and Urban Development’s (HUD) computing environment.  This review was conducted as part of the Office of Inspector General’s audit of HUD’s financial statements for fiscal year 2014 under the Chief Financial Officer’s Act of 1990. The OIG has determined that the contents of this report would not be appropriate for public disclosure and has therefore limited its…

The Federal Information Security Management Act of 2002 (FISMA) directs the Office of Inspector General (OIG) to conduct an annual evaluation of the U.S. Department of Housing and Urban Development (HUD) information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and…

Federal organizations have a fundamental responsibility to protect the privacy of individuals and their personally identifiable information (PII) that is collected, used, maintained, shared, and disposed of by agency programs and information systems. The management of U.S. Department of Housing and Urban Development (HUD) programs demands the availability and use of extensive amounts of financial, demographic, and personal information. HUD is…

The Federal Information Security Management Act of 2002 (FISMA) directs the Office of Inspector General (OIG) to conduct an annual evaluation of the U.S. Department of Housing and Urban Development (HUD) information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General audited the City of Spokane, WA’s Lead-Based Paint Hazard Control program funded by the American Recovery and Reinvestment Act to determine whether the City complied with procurement, matching, and reporting requirements when executing its grant. This audit was part of the mandate to monitor grant activities funded by the Recovery Act. We selected the City…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General conducted a limited scope internal review of Office of Healthy Homes and Lead Hazard Control (Healthy Homes) to determine whether Healthy Homes allowed excessive administrative costs to be charged to the Lead-Based Paint Hazard Control grant program. This review was the result of the audit of the Washington State Lead Hazard Control grant (2012-SE-1005,…

We have completed a review to determine whether HUD followed proper policies and procedures in responding to a breach of personally identifiable information which occurred on September 21, 2012. Specifically, for this incident, we identified what actions were taken and any deficiencies within HUD policies, plans, or current practices. We determined that HUD responded to the incident properly, following United States Computer Emergency…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General audited the Washington State Department of Commerce to determine whether it complied with Lead Hazard Control grant project eligibility, matching contribution, administrative cost, and American Recovery and Reinvestment Act reporting requirements. This audit is part of the national mandate to monitor grant activities funded by the Recovery Act. We selected…

The U.S. Department of Housing and Urban Development, Office of Inspector General audited the State of Wisconsin’s Department of Commerce’s Lead-Based Paint Hazard Control program under the American Recovery and Reinvestment Act of 2009. The audit was part of the activities in our fiscal year 2011 annual audit plan. We selected the State for review based on a citizen’s complaint forwarded to our office from the U.S. Department of Commerce’s…

The U.S. Department of Housing and Urban Development, Office of Inspector General audited the Office of Healthy Homes and Lead Hazard Control’s monitoring of its American Recovery and Reinvestment Act of 2009 grant recipients. The audit was part of the activities in our fiscal year 2011 annual audit plan. We selected Healthy Homes for audit based upon an internal audit suggestion regarding Healthy Homes’ monitoring of its grant recipients…

We audited the U.S. Department of Housing and Urban Development’s (HUD) management procedures, practices, and controls related to the Recovery Act Management and Reporting System (RAMPS). Our objective was to assess its capability to record and provide data required by the American Recovery and Reinvestment Act of 2009 on which HUD is required to report. Overall, RAMPS had the capability to record Recovery Act data and produce the reports…

We have completed an audit of the U.S. Department of Housing and Urban Development’s (HUD) information security program. We evaluated whether HUD’s Office of the Chief Information Officer (OCIO) had developed security policies, implemented procedures, and continuously monitored its entitywide information system security program. We performed this audit because it is a required component of our fiscal year 2010 consolidated financial statements…

We performed an audit of HUD's Office of Healthy Homes and Lead Hazard Control (OHHLHC) grant program for Lead Hazard Reduction Demonstration (LHRD). Our audit was initiated based on a complaint to the hotline alleging that the managers of OHHLHC changed the scores assigned by the application review panel to award grants to applicants that were not ranked high enough to receive funding under the 2009 NOFA. Our objective was to determine…

We audited the U.S. Department of Housing and Urban Development’s Office of Healthy Homes and Lead Hazard Control’s (OHHLHC) selection procedures used to award American Recovery and Reinvestment Act of 2009 (Recovery Act) grants. Our objective was to determine whether OHHLHC awarded (1) Recovery Act funds in accordance with the selection criteria specified in the fiscal year 2008 notices of funding availability (notices) and the Recovery Act and…

As part of the Office of Inspector General’s (OIG) obligation to ensure accountability and transparency in the use of the American Recovery and Reinvestment Act of 2009 (Recovery Act) funds, we performed a capacity review to assess the City of Utica, New York’s (City) administration of its lead-based paint hazard control program. The City was awarded $2.04 million under the Recovery Act to carry out lead-based paint hazard control activities in…