Ensure there are resources available for further development of geocoding services that fulfill HUD’s responsibilities stated in 43 U.S.C. § 2808(a)(5) and 43 U.S.C. § 2808(a)(12) through the reactivation of the lapsed Geocode Service Center contract.

HUD OCIO should implement procedures to ensure that information in cybersecurity risk registers is obtained accurately, consistently, and in a reproducible format and is used to a. quantify and aggregate security risks, b. normalize cybersecurity risk information across organizational units, and c. prioritize operational risk response (derived from metric 5).

HUD OCIO and the HUD Chief Risk Officer should coordinate to implement procedures to monitor the effectiveness of cybersecurity risk responses to ensure that risk tolerances are maintained at an appropriate level (derived from metric 5).

HUD OCIO and the Office of Administration should implement procedures to ensure proper validation of media sanitization in accordance with HUD Media Protection Procedures 2.0 (February 2022) and form HUD 1067A, Certification of Sanitization (derived from metric 36).

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

HUD OCIO should ensure that system owners and information system security officers consistently test their ISCPs and upload the test results to CSAM in accordance with HUD’s defined ISCP testing policy (derived from metric 63).

Update applicable requirements to require assisted property owners, including PHAs, to maintain adequate documentation to support their determinations that maintenance and hazard reduction activities that disturb surfaces with lead-based paint qualify for the de minimis exemption from the lead-safe work practices under the Lead Safe Housing Rule. Status To address this recommendation, The Office of Lead Hazard Control and Healthy Homes…

We recommend that the General Deputy Assistant Secretary for Public and Indian Housing require the Real Estate Assessment Center in coordination with the Office of Field Operations to develop and implement a plan to manage lead-based paint and lead-based paint hazards in public housing.

Require the REAC in coordination with OFO to determine the number of developments and associated units that contain lead-based paint and lead-based paint hazards. Status In May 2023, HUD published a final rule establishing a new approach to defining and assessing housing quality: The National Standards for the Physical Inspection of Real Estate (NSPIRE). Public Housing regulations were amended, and Public Housing program participants…

We recommend that the General Deputy Assistant Secretary for Public and Indian Housing require the Real Estate Assessment Center in coordination with the Office of Field Operations to determine the cost to eliminate or control the lead-based paint and lead based paint hazards in public housing and the timeframe to complete such work based on the existing funding levels and strategies that could accelerate the timeframe.

We recommend that the General Deputy Assistant Secretary for Public and Indian Housing require the Real Estate Assessment Center in coordination with the Office of Field Operations to implement adequate procedures and controls to ensure that public housing agencies appropriately identify and control lead-based paint and eliminate lead-based paint hazards in public housing.

We recommend that the General Deputy Assistant Secretary for Public and Indian Housing require the Real Estate Assessment Center in coordination with the Office of Field Operations to determine whether the public housing agencies identified as having lead-based paint hazards in their housing developments maintain and implement a plan for managing lead-based paint. For any public housing agency that does not have a plan for the management of…

We recommend that the General Deputy Assistant Secretary for Public and Indian Housing require the Real Estate Assessment Center in coordination with the Office of Field Operations to assess the lead-based paint hazard reduction activities performed at the 19 developments associated with 18 public housing agencies reviewed that did not implement interim controls and ongoing maintenance and reevaluation activities or adequately document that…

Consider conducting an analysis of staffing resources needed to manage the REO and notes sales on tribal trust properties program and adjust staffing accordingly.

In conjunction with corrective actions being taken on previous audits, revise ONAP’s internal policy and procedures to include detailed written policies and procedures for the marketing, preservation, and sale of defaulted loan notes and REO properties on tribal trust and other restricted lands.

Work with the Office of the Chief Information Officer to develop an electronic solution, such as a new module in Native Advantage or one similar to FHA’s P260 tracking system, to track the sale of defaulted loan notes and REO properties on tribal trust and other restricted lands. While the solution is being developed, HUD should put controls into place to ensure that manual systems used to track defaulted loans and REO properties are complete…

Implement written procedures to ensure consistency among field offices in reviewing spending issues, potentially preventing up to an estimated $47 million in annual CoC recaptures.

Design and implement a training program and other development tools to help grantees. The goal of such training would be to provide ideas and other development tools to help the CoCs better provide assistance with implementation of their grants and monitoring of their grantees, including assistance with developing outreach strategies, partnering with community providers, financial budgeting, and best practices. The training should focus on the…

Develop and implement a procedure to collect and analyze reported suspected instances of fraud, along with other relevant data points, that can be leveraged to develop more robust antifraud risk mitigation tools.

Communicate to HUD program staff the differences between HUD’s enterprise risk management, PIIA, and financial risk management risk assessment processes to ensure an understanding of their roles and responsibilities within HUD’s fraud risk management program.