Conduct a departmentwide comprehensive staff capacity assessment to identify resource and skills gaps of staff involved in IT acquisitions.

Develop a departmentwide human capital plan or evaluate and revise existing plans to guide the recruitment, retention, and skill development of staff involved in IT acquisitions. The plan should include related metrics to measure plan implementation and effectiveness.

Evaluate IT acquisition process workflows and identify ways to simplify the processes, facilitate more effective stakeholder coordination across offices, and create efficiencies when possible. Status The Office of the Chief Procurement Officer had agreed to an estimated completion date of Read More

Establish a centralized acquisition tracking system that allows for input and monitoring by all offices involved with the IT acquisition process by: a. Developing a plan with detailed implementation milestones; b. Obtaining appropriate approvals and funding; and c. Implementing a centralized Read More

Develop a plan for clearly defining, communicating, and enforcing IT acquisition process standards, including acquisition process roles and responsibilities.

Implement a process to periodically audit or reconcile ARC’s records.

Implement a process to periodically review approving officials’ span of control to ensure that the requirement is not exceeded.

Implement a process with ARC to ensure that cardholders and approving officials are notified before purchase card training is due to allow training to be completed in a timely manner.

Implement a process to ensure that purchase cards are suspended when a cardholder or approving official fails to complete training.

Research why ARC provided incomplete monthly transactional data and identify a solution to ensure the completeness of future transmissions.

Enhance the process to periodically analyze data for split transactions or improper MCCs and follow up on any potential issues identified.

Require ARC to update its MCC tracking log, to include the amount, the date of MCC override removal, and staff assigned, to ensure that an override is removed after the approved purchase is made.

Implement a process with Citibank and ARC to provide global notifications to cardholders and approving officials before autoclosures of credit card statements.

Implement a process to suspend cardholders or approving officials who repeatedly cause HUD to pay interest.

Obtain supporting documentation for the $1,807 spent on two cardholders’ purchase cards or require the vendors or cardholders to repay the funds to the applicable HUD program.

Identify short- and long-term plans for the RPA program that align its capabilities, staffing needs, funding projections, and mission needs.

Implement procedures to capture and monitor centralized logs to maintain appropriate visibility into bot activities and provide for auditability of bot actions.

Implement procedures to periodically review RPA system access and remove access for users that are not authorized or no longer have a need to use the system.

Implement procedures to ensure that attended bots use the security rights and credentials of the attending user.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.