Implement procedures to periodically review RPA system access and remove access for users that are not authorized or no longer have a need to use the system.

Implement procedures to ensure that attended bots use the security rights and credentials of the attending user.

Define and communicate policies and procedures to ensure that its products, system components, systems, and services comply with its cybersecurity and SCRM requirements. This recommendation includes: Identification and prioritization of externally provided systems (new and legacy), components, and services. How HUD maintains awareness of its upstream suppliers. The integration of…

Create a plan and timeline that outlines OFO’s proposal to make necessary improvements to the EBLL tracker, such as moving it to a different platform.

Provide field office staff access to historical data in the EBLL tracker to be readily available as needed, with adequate protection of PII.

Support unsupported expenditures of $60,750 that were drawn down for the grant. For any unsupported expenditures require grantee reimburse HUD.

Perform a complete agency-wide fraud risk assessment (which incorporates the fraud risk assessments performed at the program level) and use the results to develop and implement an agency-wide plan to move HUD’s fraud risk management program out of the ad hoc phase. Status HUD has made steady progress in building its Fraud Risk Management program. In FY 2024, HUD received Congressional approval to establish the Office of the Chief…

Update guidance to clarify the different roles and responsibilities of the ALU, CO, CS, and COR.

Develop ALU engagement standards and incorporate them into acquisition policies and procedures.

We recommend that the Chief Procurement Officer develop, implement, and communicate requirements for program offices to establish written minimum roles and responsibilities for their respective procurement management functions, including but not limited to CORs, PMs, and SMEs.

Require Carrington to remedy HUD and the 27 borrowers in our sample with improper foreclosure filings and take administrative actions if appropriate.

Require Carrington to perform a review of loans affected by the system errors and when appropriate, remedy the borrowers or HUD.

Require Carrington to update its policies and procedures to comply with HUD requirements by reviewing eligible borrowers for streamlined options without unnecessary documents, notifying borrowers if they are ineligible for any loss mitigation options, and using best efforts to review borrowers for loss mitigation within 37 days of the foreclosure sale date.

Require Carrington to implement improved controls to prevent manual errors by performing additional review of all foreclosure actions and performing timely review of all documentation provided by the borrowers and third parties.

We recommend that HUD work with Connecticut and Shelby County to fully realize the program benefits by (1) assessing whether any of the current project activities need to be replaced with more viable project activities, thereby ensuring that any modifications to the project activities will lessen the susceptibility of rain and flood events; (2) assessing whether administrative funds have been properly allocated and charged to identify any…

We recommend that HUD conduct onsite or remote monitoring for the City of Minot and Tennessee, which have not had any monitoring since grant inception, to ensure that these grantees are on track to meet their program goals.

We recommend that HUD for grantees with delayed project activities (California, Connecticut, Louisiana, Tennessee, Virginia, New York City, Minot, and Shelby County), require each grantee to provide a detailed timeline with milestone dates of when projects should be completed and provide updates to ensure that grantees stay on schedule.

We recommend that HUD for its disaster-related program wide activities, revise the action plan and quarterly performance review checklists to a format that more specifically and directly addresses the subject program.

We recommend that HUD for its disaster-related program wide activities, require grantees to provide documentation showing that they have upfront collaboration with partnering entities in executing the grant program. If the grantee plans to hire contractors, HUD should ensure that grantees have a plan to quickly onboard contractors early in the program.

Provide evidence to support that the Authority corrected the 11 unit deficiencies for the 5 units and 7 building deficiencies for 4 buildings with outstanding deficiencies.