U.S. Department of Housing and Urban Development Personally Identifiable Information Risk Management in a Zero Trust Environment (2023-OE-0007) Evaluation Report
The OIG evaluated the U.S.
An official website of the United States government Here’s how you know
The OIG evaluated the U.S.
To promote equal opportunity and identify and eliminate discriminatory practices, Federal regulation mandates that agencies review and respond to all employment-related discrimination complaints. At the U.S.
HUD OIG is conducting the Fiscal Year (FY) 2025 evaluation of the HUD's information security (InfoSec) program and practices, as required by the Federal Information Security Modernization Act of 2014 (FISMA).
We contracted with the independent public accounting firm of Sikich CPA LLC to audit the financial statements of HUD as of and for the fiscal years ending September 30, 2024 and 2023, and to provide reports on HUD’s (1) internal control over financial reporting and (2) compliance with laws, regulations, contracts, and grant agreements and other matters, including whether financial management systems complied substantially with the requirements of the Federal Financial Management Improvement Act of 1996 (FFMIA). Our contract with Sikich required that the audit be performed
We contracted with the independent public accounting firm Sikich CPA LLC to audit the financial statements of Ginnie Mae as of and for the years ending September 30, 2024 and 2023, and to provide reports on Ginnie Mae’s (1) internal control over financial reporting and (2) compliance with laws, regulations, contracts, and grant agreements and other matters. Our contract with Sikich required that the audit be performed in accordance with U.S.
We contracted with the independent public accounting firm of Sikich CPA LLC to audit the financial statements of FHA as of and for the fiscal years ending September 30, 2024 and 2023, and to provide reports on FHA’s (1) internal control over financial reporting and (2) compliance with laws, regulations, contracts, and grant agreements and other matters. Our contract with Sikich required that the audit be performed in accordance with U.S.
The OIG evaluated the U.S. Department of Housing and Urban Development (HUD) Office of Housing’s (Housing) progress in applying zero trust security principles to protect personally identifiable information (PII) within the Federal Housing Administration (FHA) Catalyst system.HUD was in the beginning stages of implementing zero trust requirements for the data and identity pillars. HUD Office of Housing systems, including FHA Catalyst, are largely dependent on enterprise initiatives and technical solutions to effectively implement many zero trust controls.
The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies.
HUD OIG is auditing HUD's compliance with the Payment Integrity Information Act of 2019 (PIIA) for fiscal year 2024. PIIA helps agencies identify improper payments, which could impact HUD’s beneficiaries and ultimately undermines the integrity of HUD’s programs, which hinders HUD in fully achieving its mission. Our objectives are to assess (1) whether HUD has met all requirements of PIIA for fiscal year 2024 and OMB Circular A-123 Appendix C (M-21-19), and (2) HUD’s efforts to prevent and reduce improper and unknown payments.
As of January 2024, 85 percent of HUD employees had approved telework agreements, and 9 percent had approved remote work agreements. HUD estimated that 31 percent of remote employees were remote as a reasonable accommodation. Most of HUD’s remote workers served in a limited number of occupations. We evaluated the Office of the Chief Human Capital Officer’s (OCHCO) controls over the quality of data related to remote work and telework, including employees’ assignments to locality pay areas. OCHCO implemented controls over telework and remote work agre