FY 2020 FISMA
Implement multifactor authentication mechanisms for all privileged users who access information systems that process, store, or transmit PII.StatusThe Office of the Chief Information Officer reported that it has implemented a new software security solution to implement multifactor authentication, starting with a pilot on 15 FHA systems. In October 2024, HUD received additional funds through the Technology Modernization Fund for this…
HUD's Office of Multifamily Housing Programs' Complaint Process Did Not Ensure That Health and Safety Complaints Were Resolved in a Timely Manner
Develop a comprehensive process to ensure that complaints received by HUD’s Multifamily Housing Clearinghouse are resolved in a timely manner.StatusThe Office of Multifamily has been unable to address this recommendation because (1) requested funding from Congress for system enhancements was not received, and (2) the alternative of using the Federal Housing Administration Resource Center to track and monitor customer calls did not work. …
HUD's Processes for Managing IT Acquisitions
Evaluate IT acquisition process workflows and identify ways to simplify the processes, facilitate more effective stakeholder coordination across offices, and create efficiencies when possible.StatusIn September 2025, OCPO indicated that additional time was needed to implement the recommendation based on the implementation of Executive Order 14275, which initiates a governmentwide initiative to streamline federal procurement regulations and…
Management Alert 2023-IG-001: Action Needed to Ensure That Assisted Property Owners, Including Public Housing Agencies, Comply with the Lead Safe Housing Rule
Update applicable requirements to require assisted property owners, including PHAs, to maintain adequate documentation to support their determinations that maintenance and hazard reduction activities that disturb surfaces with lead-based paint qualify for the de minimis exemption from the lead-safe work practices under the Lead Safe Housing Rule.StatusTo address this recommendation, The Office of Lead Hazard Control and Healthy Homes (OLHCHH)…
HUD's Office of Multifamily Housing Programs' Complaint Process Did Not Ensure That Health and Safety Complaints Were Resolved in a Timely Manner
Develop agencywide policies and procedures for the intake, monitoring, and tracking of health and safety complaints.StatusThe Office of Multifamily Housing has not yet updated its policies and procedures for the intake, monitoring, and tracking of health and safety complaints. HUD was in the process of developing an automated monitoring system in the FHA resource center to allow tracking of individual calls and the call’s subject, such as…
Management Alert: HUD Should Take Additional Steps to Protect Contractor Employees Who Disclose Wrongdoing
Use its best efforts to include a clause requiring compliance with Section 4712 at the time of major modifications to contracts with program participants with whom HUD is unable to gain voluntary cooperation.StatusHUD provided a Management Plan that identifies actions HUD is taking to address the recommendation. The OIG and HUD have not reached an agreement that the actions proposed will fully address the recommendation. Additionally, HUD has…
Improvements Are Needed to HUD's Processes for Monitoring EBLLs and Lead-Based Paint Hazards in Public Housing
Update HUD regulations, policies, and procedures following the regulatory process required by the amended Lead Safe Housing Rule, in consideration of CDC's lowered BLRV of 3.5 ug/dL.StatusAs of January 30, 2026, the Office of Lead Hazard Control and Healthy Homes (OLHCHH) informed HUD OIG that HUD has circulated for comment a joint notice for HUD offices impacted by the modified elevated blood lead level (EBLL) threshold. These offices…
HUD PII Risk Management in a Zero Trust Environment
The CDO should coordinate with HUD’s Records Office, Privacy Office, and program offices to develop data policies and procedures for data inventory, categorization, and labeling in support of zero trust architecture.StatusHUD provided a corrective action plan for this recommendation in May 2025. The planned corrective action requires the agency to acquire a data management system, develop cataloging standards, and coordinate with the program…
Management Alert: HUD Should Take Additional Steps to Protect Contractor Employees Who Disclose Wrongdoing
HUD (a) identify all contracts related to its programs that pre-date July 1, 2013 and that have not yet been modified to include Section 4712 whistleblower protections; and (b) review all contracts entered into on or after July 1, 2013, to ensure they include a clause that requires contractors to comply with Section 4712.StatusHUD provided a Management Plan that identifies actions HUD is taking to address the recommendation. The OIG and HUD…
Improvements are Needed in HUD's Fraud Risk Management Program
Perform a complete agency-wide fraud risk assessment (which incorporates the fraud risk assessments performed at the program level) and use the results to develop and implement an agency-wide plan to move HUD’s fraud risk management program out of the ad hoc phase.StatusAs of July 2025, HUD cancelled its fraud risk management contracts and the Chief Risk Officer position was vacated under the Deferred Resignation Program. HUD is currently…
Management Alert: HUD Should Take Additional Steps to Protect Contractor Employees Who Disclose Wrongdoing
Seek voluntary cooperation from program participants to proactively modify pre-2013 contracts for the purpose of including a clause requiring compliance with Section 4712.StatusHUD provided a Management Plan that identifies actions HUD is taking to address the recommendation. The OIG and HUD have not reached an agreement that the actions proposed will fully address the recommendation. Additionally, HUD has not completed several of the…
HUD Needs To Improve Its Oversight of PBRA and FHA-Insured PBV Properties Converted Under RAD
Develop and implement a plan to determine how to implement the risk-based approach to review the Rental Assistance Demonstration properties that have not had subsequent management and occupancy reviews (MORs) in more than 3 years and to require periodic MORs going forward.StatusGiven the current resource constraints, HUD will create guidance based on risk-based MOR parameters to ensure that field staff and leadership perform MORs using a risk-…
Management Alert - Action Is Needed From HUD Leadership To Resolve Systemic Challenges With Improper Payments
Develop and execute a detailed plan and timeline for both testing and reporting estimates of improper payments in the PIH-TBRA and PBRA programs in compliance with Federal law and OMB guidance.StatusAs of January 30, 2026, HUD has not provided a management decision, detailed plan, or timeline as to how HUD will respond to the recommendation. When OIG inquired on the status of this recommendation, HUD reported it had completed work in this…
HUD Needs To Improve Its Oversight of PBRA and FHA-Insured PBV Properties Converted Under RAD
Complete the initial management and occupancy reviews (MORs) for the Rental Assistance Demonstration properties that have not had an initial MOR.StatusGiven current resource constraints, HUD will create guidance based on risk-based Management and Occupancy Review (MOR) parameters to ensure that field staff and leadership perform the initial MOR for PBRA RAD-converted properties. This guidance will specify which assessments can be done on-site…
HUD Needs To Improve Its Oversight of PBRA and FHA-Insured PBV Properties Converted Under RAD
Determine the appropriate timeframe for when initial management and occupancy reviews (MORs) should be completed for all properties that convert under the Rental Assistance Demonstration and issue updated guidance that includes a system to track the timeliness of initial MORs.StatusGiven current resource constraints, HUD agreed to create guidance based on risk-based Management and Occupancy Review (MOR) parameters to ensure that field staff and…
HUD Lacked Adequate Oversight of Lead-Based Paint Hazard Remediation in Public Housing
Require the REAC in coordination with OFO to determine the number of developments and associated units that contain lead-based paint and lead-based paint hazards.StatusAs of January 30, 2026, according to HUD, all development and enhancement of the NSPIRE software system is still on hold pending administrative guidance on HUD funded software system improvements. Additionally, the required software changes recommended under this finding…
HUD Needs To Improve Its Oversight of PBRA and FHA-Insured PBV Properties Converted Under RAD
Determine an appropriate timeframe in which non-FHA-insured Project-Based Rental Assistance (PBRA) properties converted under the Rental Assistance Demonstration should be initially inspected, work with HUD’s Real Estate Assessment Center (REAC) to ensure that inspections are ordered and completed within that timeframe, and update HUD’s publicly available and internal guidance to ensure consistent messaging in accordance with HUD’s…
HUD Did Not Comply with the Payment Integrity Information Act of 2019
Update HUD Handbook 1900.40, Do Not Pay policy, to clearly define the responsibilities for all parties and align it with current laws, processes, and procedures. This should include defining responsibilities for preaward and prepayment verification, and developing a process and governance structure to ensure that preaward and prepayment verification are consistently performed across HUD’s programs.StatusAs of January 2026, HUD has not provided…