The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Designate a Senior Agency Official for Records Management at the Assistant Secretary level or its equivalent.

We recommend that the Director of HUD’s Newark Office of Public Housing require Long Branch to reimburse Long Branch’s program from non-Federal funds for any Long Branch program funds used for payroll expenses related to services provided to Asbury Park and Red Bank as established in recommendation 2A, estimated to be $1,014,660.

We recommend that the Director of HUD’s Newark Office of Public Housing require Long Branch to prepare and provide support to show the reasonableness and eligibility of the $1,583,652 in employee incentive payments related to services performed for Asbury Park and Red Bank, which was paid from agreement income, or reimburse its program from non-Federal funds for any amount it cannot support.

We recommend that the Director of HUD’s Newark Office of Public Housing require Long Branch to implement adequate controls to ensure compliance with applicable cost principle requirements for employees, including those covering compensation for personal services, such as wages, salaries, and incentive payments, at 2 CFR 200.430. Records should reasonably reflect the total activity for which Long Branch’s employees are compensated by the non-…

Provide adequate documentation to support that the $2,588,362 in CDBG-DR funds for three unsupported project and program management services expenditures cited in this report was spent for supported, necessary, and reasonable costs. Any amount for which adequate support cannot be provided should be repaid from non-Federal funds.

Update its procurement policy to clearly define the process, which includes timing and the procurement types, for conducting an independent cost estimate and a price analysis.

Provide training to State staff to ensure that it understands and follows (1) requirements to maintain adequate documentation to support that program disbursements are eligible and reasonable and (2) procurement requirements, including independent cost estimates, cost analyses, proposal scoring, and the timely checking of the SAM data for contractors’ eligibility.

Consider allowing grantees additional time to spend the program funding on eligible activities to meet the 80 percent spending deadline.

Consider streamlining program requirements to help grantees promptly use program funds to assist those impacted by the pandemic or for activities that prepare for, prevent, or respond to the coronavirus.

Use the fraud risk inventory to enhance program-specific fraud risk assessments for the TBRA and Operating Fund programs.

Use the fraud risk inventory to enhance program-specific fraud risk assessments for the PBRA program.

Use the fraud risk inventory to enhance program-specific fraud risk assessments for the HOME program.

Ensure there are resources available for further development of geocoding services that fulfill HUD’s responsibilities stated in 43 U.S.C. § 2808(a)(5) and 43 U.S.C. § 2808(a)(12) through the reactivation of the lapsed Geocode Service Center contract.

HUD OCIO should implement procedures to ensure that information in cybersecurity risk registers is obtained accurately, consistently, and in a reproducible format and is used to a. quantify and aggregate security risks, b. normalize cybersecurity risk information across organizational units, and c. prioritize operational risk response (derived from metric 5).

HUD OCIO and the HUD Chief Risk Officer should coordinate to implement procedures to monitor the effectiveness of cybersecurity risk responses to ensure that risk tolerances are maintained at an appropriate level (derived from metric 5).