The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to assess…

We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the Geospatial Data Act of 2018 (the Act). Our audit objective was to determine whether HUD met the 13 responsibilities stated in the Act with regard to its collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data.  The Act also generally requires covered agencies provide access to geospatial data and…

In coordination with the Pandemic Response Accountability Committee, we conducted an audit to identify potential fraud schemes that could affect HUD’s pandemic funds.  We reviewed the funds appropriated by the Coronavirus Aid, Relief, and Economic Security (CARES) Act and the American Rescue Plan (ARP) Act for the Tenant-Based Rental Assistance (TBRA), Project-Based Rental Assistance (PBRA), HOME Investment Partnerships, and Public Housing…

We audited the U.S. Department of Housing and Urban Development’s (HUD) Community Development Block Grant Coronavirus Aid, Relief, and Economic Security (CARES) Act program. Our audit objective was to determine what challenges grantees faced in using program funds for activities that prepare for, prevent, or respond to the coronavirus and its impact.  We used a survey questionnaire to gather feedback and insight directly from 1,047 program…

“According to the Centers for Disease Control and Prevention (CDC), lead-based paint and lead-contaminated dust are some of the most widespread and hazardous sources of lead exposure for young children in the United States.  When lead-based paint peels and cracks, it results in lead-contaminated paint chips and dust.  Children can be poisoned if they chew on surfaces coated with lead-based paint, eat flaking paint chips, or eat or…

We completed a corrective action verification (CAV) of recommendations from prior Office of Inspector General (OIG) audit reports on the U.S. Department of Housing and Urban Development’s (HUD) government purchase cards and government travel cards, both issued January 31, 2020. During our CAV, we followed up on all 10 recommendations from OIG audit report 2020-KC-0001 and all 13 recommendations from OIG audit report 2020-KC-0002. Our CAV…

We audited the U.S. Department of Housing and Urban Development’s (HUD) fiscal year 2021 compliance with the Payment Integrity Information Act of 2019 (PIIA) and implementation of Office of Management and Budget (OMB) guidance.  PIIA was enacted to prevent and reduce improper payments and require each agency’s inspector general to perform an annual review of the agency’s compliance with PIIA.  Our objectives were to assess (1) whether…

Develop a control to detect loans that did not maintain the required flood insurance to put $1.5 billion to better use by avoiding potential future costs to the FHA insurance fund from inadequately insured properties. Corrective Action Taken In November 2022, FHA published the Acceptance of Private Flood Insurance for FHA-Insured Mortgages final rule (Docket No. FR-6084-F-02) in the Federal Register and issued Mortgagee Letter 2022-18,…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to assess…

The 2022-2026 HUD OIG Strategic Plan is our governing document for how we will build on our progress and continue evolving over the next 4 years. It is designed to paint a clear and compelling picture of where we are headed. We commit to the following 3 goals, knowing that they will require continued investment in our workforce and staying true to our core values. Strategic Goal 1 - Influence positive outcomes for HUD programs and…

The Federal Information Security Modernization Act of 2014 (FISMA) requires all federal agencies to conduct independent security technical verification testing on a sampling of information systems annually.  In conjunction with our fiscal year 2021 FISMA evaluation (2021-OE-0001), we conducted a targeted security testing assessment of sample systems that resulted in a Topic Brief.  The objective of this application vulnerability…

We audited the U.S. Department of Housing and Urban Development’s (HUD) oversight of its public housing agencies’ (PHA) reasonable accommodation policies and procedures.  We initiated this audit because we identified an increase in housing discrimination complaints based on a failure to provide a reasonable accommodation, even as the total number of all housing discrimination complaints was decreasing.  Our audit objective was to…

We audited the U.S. Department of Housing and Urban Development’s (HUD) oversight of Federal Housing Administration (FHA) refunds based on a hotline complaint alleging that HUD was trying to make it difficult for claimants to obtain refunds or discourage them from pursuing the refunds, which are due to eligible homeowners from the unearned portion of the upfront mortgage insurance premium paid.  Our audit found the allegations from the…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General (OIG), completed a corrective action verification (CAV) of recommendations from four prior home equity conversion mortgage (HECM) audit reports.  The CAV was initiated because protecting the Federal Housing Administration (FHA) mutual mortgage insurance fund is one of HUD’s top management challenges.  The prior audits determined that HUD lacked…

We conducted this evaluation due to the growing homeless crisis and the U.S. Department of Housing and Urban Development’s (HUD) establishing a goal of ending homelessness.  Our objective was to evaluate the challenges that participating public housing agencies (PHA) face in meeting the goals and objectives of the HUD Veterans Affairs Supportive Housing (VASH) program. The results from our limited review may help HUD in addressing PHAs’…

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) ability to effectively complete information technology (IT) acquisitions.  HUD’s IT systems and its modernization plans depend heavily on contractors, yet HUD has historically faced significant challenges with implementing effective acquisition processes. Therefore, HUD’s acquisition capacity represents a key potential risk within HUD’s IT environment. We found that a…

On March 27, 2020, the Coronavirus Aid, Relief, and Economic Security (CARES) Act made available $5 billion in supplemental CDBG funding for grants to prevent, prepare for, and respond to the coronavirus pandemic (CDBG-CV grants).  Because of similarities, we reviewed 132 CDBG-DR program audits and evaluations issued from May 2002 to March 2020 to summarize the common CDBG-DR program weaknesses and risks for CPD to consider to help its CDBG…

While some of HUD’s efforts to improve its hiring and human capital functions and reduce its average time-to-hire have been successful, HUD’s hiring process overall was not efficient.  HUD’s Office of the Chief Human Capital Officer (OCHCO), which is responsible for developing and implementing policies and procedures associated with human capital management, set a goal to reduce the average time-to-hire but did not meet this goal. …

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) modernization roadmap.  A significant number of HUD’s mission-essential applications have not been modernized, which presents multiple sources of risk.  These applications are hosted on legacy information systems and mainframe platforms, which are operationally inefficient, increasingly difficult to secure, and costly to maintain.…

We audited the U.S. Department of Housing and Urban Development’s (HUD) fiscal year 2020 compliance with the Payment Integrity Information Act of 2019 (PIIA) and other Office of Management and Budget guidance.  PIIA was enacted to prevent and reduce improper payments and requires each agency’s inspector general to perform an annual review of the agency’s compliance with PIIA.  Our audit objective was to determine whether HUD complied…