We have completed our fiscal year (FY) 2023 Federal Information Security Modernization Act of 2014 (FISMA) penetration test and vulnerability assessment.  The objective of this evaluation was to test and verify the technical implementation of a limited set of security controls on judgmentally selected U.S. Department of Housing and Urban Development (HUD) information systems and applications.HUD demonstrated successes in securely…

We audited the U.S. Department of Housing and Urban Development (HUD), Office of Single Family Housing’s Federal Housing Administration (FHA) Resource Center’s handling of housing discrimination inquiries.  We initiated the audit to assist HUD with ensuring that the FHA Resource Center (1) provided accurate and complete information on potential housing discrimination to its customers and (2) ensured that instances of potential housing…

We performed an audit examining HUD’s efforts to prevent duplication of benefits when using Community Development Block Grant (CDBG) Disaster Recovery and Mitigation funds.  Our objective was to determine how the U.S. Department of Housing and Urban Development (HUD) assesses the adequacy of grantee procedures to prevent a duplication of benefits, both before and after grant execution. HUD certified grantees’ high-level processes for…

We performed an audit related to the U.S. Department of Housing and Urban Development’s (HUD) Disaster Recovery Data Portal.  The Disaster Recovery Data Portal is a technological solution planned by HUD to facilitate the rapid and secure transmission of data from the Federal Emergency Management Agency (FEMA) to HUD’s Community Development Block Grant Disaster Recovery grantees.  We performed the work because HUD needs a solution to…

The PRAC and ten of its member Offices of Inspector General (OIG) (together, the PRAC Oversight Team) undertook this case study-based review: 1. To determine how much pandemic relief funding went to six selected communities; 2. To gain more insight about how the six communities used their pandemic relief funding; and 3. To learn more about whether the funding helped the six communities respond to the pandemic

We audited the U.S. Department of Housing and Urban Development’s (HUD), oversight of Community Development Block Grant Disaster Recovery (CDBG-DR) grantees’ use of program income.  We initiated this audit in accordance with our goal of ensuring and promoting accountability and effectiveness in disaster response and recovery.  Our audit objective was to determine whether HUD ensured that program income generated from disaster funds…

We audited the U.S. Department of Housing and Urban Development’s (HUD) Office of the Chief Procurement Officer’s use of its quality assurance surveillance plan (QASP) for its Atlanta Homeownership Center field service management (FSM) housing contracts.  We initiated the audit to support HUD’s priority on increasing efficiency in procurement.  An assessment of HUD’s use of its QASP, as part of its 3.10 FSM 5-year contract…

We audited the Office of Community Planning and Development’s (CPD) monitoring and oversight of the Community Development Block Grant - Disaster Recovery (CDBG-DR) program.  The objective of the audit was to determine whether CPD had effectively and efficiently designed its CDBG-DR program requirements and monitoring to ensure that the grantees meet statutory and other Federal low- and moderate-income (LMI) requirements.  Generally,…

We conducted this evaluation to assess the maturity of HUD’s Robotic process automation (RPA) activities and determine whether HUD had implemented related controls to address technology and program management risks.  RPA is a software technology used to emulate human actions on a computer.  RPA software programs, referred to as “bots,” can complete repetitive tasks quickly and consistently, freeing up employees to work on other,…

We audited the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) infrastructure to support mandatory telework. During mandatory telework, more employees simultaneously needed remote access to HUD’s network and agency resources for an extended period, which presented unique risks and security requirements. While HUD is no longer operating under mandatory telework, understanding the challenges it faced is key to…