Recommendations

Open Recommendations by Oversight Area

Housing Assistance

Community Development

Disaster Recovery

Financial Risk and Accountability

Technology and Cybersecurity

Health and Safety

HUD's Operations

Priority Recommendations
Open Recommendations

View data table

Open Recommendations by Oversight Area
Oversight Area	Priority Recommendations	Open Recommendations
Housing Assistance	75	100
Community Development	3	75
Disaster Recovery	3	82
Financial Risk and Accountability	6	130
Technology and Cybersecurity	4	88
Health and Safety	1	53
HUD's Operations	4	100
Total	96	628

Filter search results using the following criteria

HUD Business Functions

122 Results

Clear

In accordance with the Chief Financial Officers Act of 1990, as amended, we are required to annually audit the consolidated financial statements of the U.S. Department of Housing and Urban Development (HUD). Our objective was to express an opinion on the fair presentation of HUD’s consolidated…

Oversight Area: HUD Business Functions

Prepare a white paper regarding the accounting treatment for each type of funding disbursed under the HCVP, to include a comparison of the qualities the funding embodies against the qualities that are necessary for it to be considered a prepayment versus an expense according to generally accepted accounting principles. The Chief Financial Officer should work with PIH to gather the information necessary to complete this analysis and have PIH review it to ensure the accuracy of the program information used.

Develop and implement a policy that requires OCFO to review all new program notices, new regulations, and new types of funding and evaluate each against the accounting standards and current accounting treatment (as documented in white papers or other forms) to determine whether OCFO’s treatment complies with generally accepted accounting principles and if not, propose changes. The policy should include formal designation of roles and responsibilities as well as internal controls to ensure proper review and approval of conclusions.

Once additional data are available, and at least quarterly, reduce the CARES Act PIH prepayment by the amount actually spent by PHAs or an estimated amount with a low level of estimation uncertainty.

As part of the validation process for CPD’s accrued grant liabilities, review CPD’s accrued grant liabilities estimation methodology to ensure that it is based on verifiable grantee supporting documentation and all assumptions and variables used for the grant accrual estimate were properly established, supported, and documented.

Research the survey responses that resulted in a positive cash on hand balance to determine whether a cash advance exists. If so, the Chief Financial Officer should coordinate with CPD to (1) determine whether the grantees have proper documentation and approvals allowing for cash advances and (2) develop and implement procedures to estimate and account for cash advances for financial reporting purposes.

Investigate other methods for validating CPD’s accrued grant liabilities estimate, including the use of other sampling units, which could provide additional relevant information that can be used to produce more reasonable results and reduce estimation uncertainty to a low level.

Work with the Director of the Office of Multifamily Asset Management and Portfolio Oversight to ensure that all debt owed to HUD is identified, accurately reported in HUD’s financial records, and properly monitored to ensure compliance with applicable laws and regulations.

Reevaluate and adequately document justification for the establishment of the percentages and other key assumptions used to determine the accrual amount for each program in CPD’s accrued grant liabilities estimate.

Implement the requirements of HUD’s current Debt Collection Handbook, to include (1) assigning a program office manager, (2) developing and implementing debt collection standard operating procedures, (3) designating program action officials, and (4) ensuring that program action officials are trained and perform debt collection duties in a timely manner in accordance with the Debt Collection Handbook; HUD Handbook 2000.06, REV-4, Audits Management System; and other pertinent guidance and policies to ensure the accurate reporting of receivables in the general ledger.

Review all executed repayment agreements in HUD’s Tenant Rental Assistance Certification System (TRACS) to determine which repayment agreements have not been fully repaid and represent an amount owed to HUD and work with OCFO to record these receivables.

Include a field in TRACS to identify which repayment agreements represent an amount owed to HUD and implement controls to ensure the accuracy of the listing in TRACS.

Develop and implement controls to track and enforce repayments owed to HUD to ensure that owners are not delinquent on their repayment agreements.

Ensure that OCFO has the data it needs to record a reasonable PIH prepayment estimate related to supplemental pandemic funding in fiscal year 2021 and beyond if additional funding is provided.

We audited rent credits that the U.S. Department of Housing and Urban Development (HUD) received from the U.S. General Services Administration (GSA) during fiscal years 2015 through 2018 in exchange for financial contributions for building improvements. We initiated this audit due to concerns we…

Oversight Area: HUD Business Functions

We recommend that HUD’s Chief Financial Officer investigate the facts surrounding the potential Antideficiency Act violation involving the $7,787,675 in rent credits and make a formal determination. If it is determined that a violation occurred, the Chief Financial Officer should develop corrective action plans or internal process improvements as necessary, take disciplinary actions as appropriate, and report the identified violations to the oversight authorities including the HUD Secretary, the President, OMB, Congress and the Comptroller General.

We recommend that HUD’s Chief Administrative Officer implement the corrective actions and internal process improvements in internal control developed as a result of the Chief Financial Officer’s investigation addressed in recommendation 1A.

We recommend that HUD’s Chief Administrative Officer provide training to responsible staff and officials to ensure that those that may be involved with negotiating any GSA rent credits, like the credits addressed in this report, identify such potential rent credit transactions and follow the corrective actions and process improvements implemented to resolve recommendation 1B.

We audited the U.S. Department of Housing and Urban Development’s (HUD) fiscal year 2020 compliance with the Payment Integrity Information Act of 2019 (PIIA) and other Office of Management and Budget guidance. PIIA was enacted to prevent and reduce improper payments and requires each agency’s…

Oversight Area: HUD Business Functions

For the MF-RAP, PIH-TBRA, and CPD-HIM programs, ensure that the program improper payments rate estimates adequately test for and include improper payments of Federal funding that are made by State, local, and other organizations administering these programs and adequately disclose any limitations imposed or encountered when reporting on improper payments, to a degree that fairly informs users of the respective reported information.

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) modernization roadmap. A significant number of HUD’s mission-essential applications have not been modernized, which presents multiple sources of risk. These applications are hosted on legacy…

Oversight Area: HUD Business Functions

Develop an enterprise-wide IT modernization strategy that establishes a framework to align with the IT modernization roadmap.

Corrective Action Taken

In January, 2024, HUD provided an OCIO approved an IT Modernization strategy that established a framework that aligned with its IT modernization roadmap. The strategy addressed each of the recommendation components (a. roles and responsibilities, b. prioritization of modernization initiatives, c. coordination process between OCIO and program offices, d. phased approach, and e. how lessons learned will be captured.

Obtain the proper approval and communicate the IT modernization strategy to all appropriate stakeholders, including HUD program offices.

While some of HUD’s efforts to improve its hiring and human capital functions and reduce its average time-to-hire have been successful, HUD’s hiring process overall was not efficient. HUD’s Office of the Chief Human Capital Officer (OCHCO), which is responsible for developing and implementing…

Oversight Area: HUD Business Functions

Standardize position descriptions and job analyses for mission-critical occupations, high-risk occupations, and positions with high-volume staffing needs.

Develop and share best practices with HUD’s program offices on how hiring managers can execute hiring process responsibilities to meet timeliness goals.

Determine the cause for the variations in the timeliness of the preemployment and security checks step in FY 2017, 2018, and 2019 and develop appropriate process improvements.

Develop and document comprehensive reference documents on the hiring processes, procedures, roles, and responsibilities.

Develop and implement regular training for process owners on the hiring process.

Create and implement a knowledge management strategy, such as developing standard operating procedures, reference sheets, and program office fact sheets.

Corrective Action Taken

OCHCO developed and implemented client profiles for each HUD program office to address knowledge loss and the need for offices to explain or reexplain their mission and functions. The profiles will serve as a central repository to learn about the various programs and missions of HUD and will allow OCHCO staff, other key HUD program office staff, and HUD’s service provider staff to view critical information for each HUD program office.

Conduct a feasibility study for an automated POL.

Develop and implement time-to-hire goals that account for each hiring process step.

Develop and document methodologies on how OCHCO calculates hiring metrics to ensure that its hiring metrics and hiring goals align across all of its data sources, including the POL, the human capital dashboard, and the HCOP.

Track the quality of candidates as measured by the hiring officials.

Track the number of recruit attempts that result in a selection, the number of recruit attempts that result in a successful hire, and the number of positions that are reposted due to unsuccessful first recruit attempts.

We conducted this engagement in coordination with the Pandemic Response Accountability Committee (PRAC) to gain an understanding of the U.S. Department of Housing and Urban Development’s (HUD) fraud risk management practices and develop an inventory of fraud risks that HUD had not already…

Oversight Area: HUD Business Functions

Coordinate with CPD program staff to clarify the (1) roles and responsibilities of the CRO, HCCRT, and CPD’s risk management staff with regard to identifying, assessing, and mitigating fraud risks and (2) purpose and role of HUD’s ERM processes and program office risk management processes with regard to identifying, assessing, and mitigating fraud risks.

Complete a program-specific fraud risk assessment and risk profile for the CDBG and ESG programs, with emphasis on CARES Act funding, and replicate this process to create program-specific fraud assessments and risk profiles for other CPD programs.

Consider OIG’s fraud risk inventory to improve CPD’s own fraud risk assessments and develop a program-specific fraud risk map and compendium.

Implement efforts to increase the awareness of fraud at all levels (headquarters, field offices, grantees, subrecipients, etc.), including but not limited to regularly publishing articles on known fraud schemes and identified instances of fraud in periodic newsletters or on CPD’s intranet website, providing recurring fraud risk trainings to HUD employees and grantees and working with OIG to develop materials to support fraud awareness.

Develop and implement a fraud risk checklist or other instrument as part of CPD’s monitoring oversight requirements, to be completed as part of each remote and onsite monitoring review.

Develop and implement a fraud analytics strategy using available data, including but not limited to data and information collected during the grantee risk assessment and monitoring processes, to begin conducting data analyses to identify potential fraud risks for further review.

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) ability to effectively complete information technology (IT) acquisitions. HUD’s IT systems and its modernization plans depend heavily on contractors, yet HUD has historically faced significant challenges with implementing…

Oversight Area: HUD Business Functions

Conduct a departmentwide comprehensive staff capacity assessment to identify resource and skills gaps of staff involved in IT acquisitions.

Develop a departmentwide human capital plan or evaluate and revise existing plans to guide the recruitment, retention, and skill development of staff involved in IT acquisitions. The plan should include related metrics to measure plan implementation and effectiveness.

Evaluate IT acquisition process workflows and identify ways to simplify the processes, facilitate more effective stakeholder coordination across offices, and create efficiencies when possible.

Status

In November 2024, OCPO submitted an IT Acquisition Workflow Report and a document outlining responsibilities as evidence for closure. Although these documents clarified existing roles and documented one sample workflow, they did not propose or implement revised IT-acquisition policies or procedures producing measurable improvements. As of July 2025, OIG received no further information that identifies improvements in the IT acquisition process.

Analysis

To fully address this recommendation, HUD must provide evidence that it has published its standard operating procedures resulting from its evaluation of workflows and efforts to simplify processes and facilitate more effective coordination.

Implementation of this recommendation will result in defined IT acquisition process workflow procedures to increase efficiency and ensure coordination across program offices.

Establish a centralized acquisition tracking system that allows for input and monitoring by all offices involved with the IT acquisition process by: a. Developing a plan with detailed implementation milestones; b. Obtaining appropriate approvals and funding; and c. Implementing a centralized acquisition tracking system, based on the implementation plan and approvals from 4a and 4b.

Develop a plan for clearly defining, communicating, and enforcing IT acquisition process standards, including acquisition process roles and responsibilities.

We contracted with the independent public accounting firm of CliftonLarsonAllen LLP (CLA) to audit the financial statements of HUD as of and for the fiscal years ended September 30, 2021 and 2020,1 and to provide reports on HUD’s 1) internal control over financial reporting; and 2) compliance with…

Oversight Area: HUD Business Functions

As part of the validation process for CPD’s accrued liabilities, improve its validation process to ensure that it is based on verifiable grantees responses and supporting documentation.

We are recommending OCFO reopen the following recommendation reported in audit report 2021-FO-0003-0001-D: 1B. As part of the validation process for CPD’s accrued grant liabilities, review CPD’s accrued grant liabilities estimation methodology to ensure that it is based on verifiable grantee supporting documentation and all assumptions and variables used for the grant accrual estimate were properly established, supported, and documented.

Implement a policy to ensure the federal regulation responsibilities for outgoing HUD employees are reassigned to appropriate HUD personnel to enable HUD to continue to address those federal regulation requirements.

Establish controls to determine if single audits for HUD grantees are being completed and reported in a timely manner in accordance with 2 CFR §200.512.

Provide a means for which HUD grantees and their auditors can request technical advice and counsel.

Establish controls to determine if follow-up is being conducted to determine if the grant recipients have taken appropriate and timely corrective action. That follow-up must include the following: a. Issuing a management decision letter as prescribed in 2 CFR §200.521; b. Monitoring recipients to ensure they are taking appropriate and timely corrective action; c.Using cooperative audit resolution mechanisms (see 2 CFR §200.25) to improve federal program outcomes through better audit resolution, follow-up, and corrective action; and d. Developing a baseline, metrics, and targets to track, over time, the effectiveness of HUD’s process to follow-up on audit findings and on the effectiveness of single audits in improving recipient accountability and their use by HUD in making award decisions.

Establish controls to ensure that HUD provides Office of Management Budget (OMB) annual updates to the compliance supplement6 and works with OMB to ensure that the supplement focuses the auditor to test compliance requirements most likely to cause improper payments, fraud, waste, abuse or generate audit findings for which HUD will take sanctions.

Establish a control to hold HUD’s Single Audit Accountable Official responsible for improving the effectiveness of the single audit process based on single audit metrics that HUD will establish in response to recommendation 4D above.

We contracted with the independent public accounting firm of CliftonLarsonAllen LLP (CLA) to audit the financial statements of FHA as of and for the fiscal years ended September 30, 2021 and 2020, and to provide reports on FHA’s 1) internal control over financial reporting; and 2) compliance with…

Oversight Area: HUD Business Functions

Request an opinion from HUD’s Office of the Chief Financial Officer’s Appropriation Law Division on whether the abnormal balance in account 4901 constitutes a violation of the Antideficiency Act.

Enhance standard operating procedures around system and account reconciliations to ensure that they cover all possible scenarios and are easy to follow.

Appropriately train and monitor new personnel to ensure that they understand and execute the procedures and controls.

Update procedures to clearly define error thresholds that require follow-up and the communication process for elevating errors to supervisors, managers, and senior leadership.

Establish clear lines of communication within and between divisions to ensure that all personnel become aware of issues that may impact their duties and responsibilities.

Strengthen controls over the preparation of HECM-related reconciliations, reviews, and oversight by ensuring that (1) program personnel preparing such reconciliations understand how such reconciliations impact financial accounting and reporting and (2) financial personnel sufficiently understand programs and systems to determine their general ledger impact.

Enhance the quarterly variance analysis to identify the business reasons for changes in account balances and pay specific attention to abnormal balances and activity.

Strengthen the financial statement review controls by completing a compliance matrix to ensure all balances that are presented and disclosed reflect the most up-to-date financial accounting and reporting guidance.

Perform a comprehensive analysis for all cohort years and assess the impact that the use of the scheduled UPB instead of the current UPB has on the LGL. If significant based on a quantitative threshold, update the SF cash flow model to incorporate the current UPB data.

Develop and implement a new process to require the annual validation of the fourth quarter endorsement volume estimation method for the SF Forward model. The process should include a management review and approval control component. The process should be documented and should demonstrate that management’s estimate is based on the analysis of past experiences, current policy, and market considerations, and, if necessary, incorporate improvement recommendations.

Perform a comprehensive review of the SF and HECM model documentation and update the specific sections with the current practices and procedures required to execute the model activities.

Establish a process that requires the timely review and update of model documentation. The process should include tracking the dates and nature of the revisions.

Provide training and periodic reminders to field staff and management to ensure that the data fields in DAP and on the final Form HUD-290 are accurate and consistent.

Develop and implement written procedures that provide guidance or best practices that should be followed to address data anomalies. At a minimum, these written procedures should include the following: (1) a process for identifying key data attributes that significantly impact the results, (2) the determination of preset thresholds for analyst and management attention, (3) the treatment of data anomalies, such as null values or values that exceed preset thresholds, (4) a process for providing feedback to the upstream data provider(s) for corrective and preventive actions when data integrity issues are detected and management concludes the issue is significant, and (5) a process for preparing documentation to support management decisions.

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and…

Oversight Area: HUD Business Functions

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Define and communicate policies and procedures to ensure that its products, system components, systems, and services comply with its cybersecurity and supply chain risk management (SCRM) requirements. This recommendation includes (a) identification and prioritization of externally provided systems (new and legacy), components, and services; (b) how HUD maintains awareness of its upstream suppliers; (c) the integration of acquisition processes, tools, and techniques to use the acquisition process to protect the supply chain; and (d) contract tools or procurement methods to confirm that contractors are meeting their obligations.

Corrective Action

HUD finalized its Supply Chain Risk Management (SCRM) policy in April 2025, which utilizes a SCRM questionnaire to assess each vendor’s supply chain risk, and identifies and prioritizes risks accordingly. HUD’s SCRM program team manages a supply chain risk register which records prior and current vendors, and those that have undergone risk assessments to maintain visibility into its upstream suppliers and track changes over time. HUD also used multiple tools such as supply chain risk criteria and sourcing research and market analysis to evaluate vendors and strengthen protection of the supply chain during acquisition. By implementing these procedures, as well as, having HUD’s program management team conducting annual and quarterly performance reviews for all vendors, HUD ensures contractors are meeting their contractual obligations.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Open Recommendations by Oversight Area

Oversight Area

Status

Priority

Audit of HUD’s Fiscal Year 2020 Consolidated Financial Statements

Reimbursements Received Through Rent Credits From the General Services Administration

HUD Did Not Fully Comply With the Payment Integrity Information Act of 2019

HUD IT Modernization Roadmap Evaluation Report

Opportunities Exist To Improve the U.S. Department of Housing and Urban Development’s Hiring Process

Fraud Risk Inventory for the CDBG and ESG CARES Act Funds

HUD’s Processes for Managing IT Acquisitions

Audit of HUD’s Fiscal Years 2021 and 2020 Consolidated Financial Statements

Audit of FHA’s Fiscal Years 2021 and 2020 Consolidated Financial Statements

Fiscal Year 2021 Federal Information Security Modernization Act (FISMA) Evaluation Report

Stay Informed