Recommendations

Open Recommendations by Oversight Area

Housing Assistance

Community Development

Disaster Recovery

Financial Risk and Accountability

Technology and Cybersecurity

Health and Safety

HUD's Operations

Priority Recommendations
Open Recommendations

View data table

Open Recommendations by Oversight Area
Oversight Area	Priority Recommendations	Open Recommendations
Housing Assistance	75	100
Community Development	3	75
Disaster Recovery	3	82
Financial Risk and Accountability	6	130
Technology and Cybersecurity	4	88
Health and Safety	1	53
HUD's Operations	4	100
Total	96	628

Filter search results using the following criteria

22 Results

Clear

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General audited Federal Housing Administration (FHA)-insured loans from fiscal year 2018. Our audit objective was to determine whether FHA provided insurance on loans that were made to ineligible, delinquent Federal…

Oversight Area: Homeownership

Require lenders to obtain the borrowers’ consent to verify the existence of delinquent Federal taxes with the IRS during loan origination and deny any applicant with delinquent Federal tax debt and no payment plan or a noncompliant payment plan or an applicant refusing to provide consent from receiving FHA insurance to put at least $6.1 billion to better use by avoiding potential future costs to the FHA insurance fund.

Status

To fully address this recommendation, HUD will need to provide evidence that it established a method of borrower consent to verify the existence of delinquent federal taxes including, but not limited to one of the options OIG provided, which were (1) lenders obtaining the borrowers' consent to obtain their tax records directly from the IRS or (2) borrowers accessing their own tax information and submitting it to the lenders.

Implementation of this rule should result in HUD putting $6.1 billion to better use.

Analysis

Implementation of this rule should result in HUD putting $6.1 billion to better use.

Revise HUD handbooks for forward and reverse mortgages to reflect that tax liens and judgments are no longer reported on credit reports.

Revise HUD handbooks for forward and reverse mortgages for uniformity in the treatment of delinquent tax debt and the existence of payment plans as only the forward mortgage handbook requires 3 months of payments.

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General audited Federal Housing Administration (FHA)-insured loans from calendar year 2016. Our audit objective was to determine whether FHA insured loans to borrowers with delinquent Federal debt or who were subject…

Oversight Area: Homeownership

Develop a method for using the Do Not Pay portal during the underwriting process to identify delinquent child support and delinquent Federal debt to prevent future FHA loans to ineligible borrowers to put $1.9 billion to better use.

Status

The Office of Housing has approved prioritization of funding for Integration between the Treasury’s Do Not Pay portal and HUD’s Computerized Homes Underwriting Reporting System (CHUMS). Funding was allocated to the CHUMS IT contractor on January 26, 2024, to integrate Treasury’s Do Not Pay system with CHUMS, and the IT development project was kicked off the week of February 5, 2024. As of July 2025, the CHUMS Memorandum of Understanding (MOU) and Interconnection Security Agreement (ISA) with DNP is fully signed. However, the System of Records Notice (SORN) is under review with OMB. HUD's Office of Privacy is in the process of reaching out to OMB to request comments or permission to publish. The anticipated completion date of the CHUMS interface with DNP is December 31, 2025.

Analysis

To fully address this recommendation, HUD must provide evidence that it has implemented applicant screening against the Do Not Pay portal to identify delinquent child support and delinquent federal debt to prevent future FHA loans from going to ineligible borrowers.

Implementation of this rule should result in HUD putting $1.9 billion to better use.

Revise the single-family handbook to comply with regulations that prevent loans to borrowers with delinquent child support subject to Federal offset.

Schedule the timely renewal of data-sharing agreements to prevent data loss in CAIVRS or discontinue use of the system if implementation of 1A makes CAIVRS unnecessary.

We audited the U.S. Department of Housing and Urban Development’s (HUD) oversight of multifamily housing properties with failing Real Estate Assessment Center (REAC) scores or life-threatening exigent health and safety (EHS) deficiencies. Our objective was to determine whether HUD had effective…

Oversight Area: Housing Health and Safety

Develop and implement adequate procedures and controls to ensure that (1) staff issues notices of violation and default within 15 calendar days of the inspection report release date and (2) the Office of Multifamily Asset Management and Portfolio Oversight is made aware when notices are not issued within 15 calendar days after the inspection report release date and takes action as appropriate to ensure that future notices are issued in a timely manner.

Corrective Action

HUD’s Office of Multifamily Housing created procedures to identify failed inspections and notify the appropriate field office that a property in their portfolio had recently failed inspection. The procedures included a timeline for issuing a Notice of Violation/Notice of Default to the owner of the property. Implementation of the recommendation ensures that multifamily property owners are notified of deficiencies in a timely manner to take corrective actions.

Include language in future notices of violation and default clearly stating that owners are required to inspect all units (including vacant units), common areas, grounds, building systems, and sites as part of the owner survey and require owners to include sufficient detail in the surveys to show (1) when the survey was conducted and (2) that the survey was a complete survey of the project.

Corrective Action

HUD’s Office of Multifamily Housing updated the language in the template document to be used in future notices of violation and default, clearly stating that owners are required to inspect all units (including vacant units), common areas, grounds, building systems, and sites as part of the owner survey and require owners to include sufficient detail in the surveys to show (1) when the survey was conducted and (2) that the survey was a complete survey of the project. Specifically, HUD notified all Asset Management Division Directors informing them of the updates to the templates and instructed them to use the templates. The implementation of this recommendation has the potential to positively and directly impact the health and safety of families.

Develop and implement adequate policies, procedures, and controls to ensure that owner certifications and surveys and other relevant documents related to properties that fail inspections or are noted as having EHS deficiencies are maintained and retrievable from an easily accessible location.

Develop and implement adequate controls to ensure that HUD staff with the appropriate level of authority approves extensions to the notices of violation and default cure periods in writing and that documentation is maintained to support such approvals.

Modify the queries used to generate the schedules of properties that accompany the reports to Congress to consider a larger range of dates to ensure that properties that failed consecutive inspections are appropriately identified on all applicable schedules.

Assess and streamline the processes for preparing, reviewing, and approving the reports as appropriate to ensure that the reports are submitted to Congress on or before the required due date.

Implement adequate procedures and controls to ensure that documentation is maintained to support that the reports were submitted to Congress.

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and…

Implement a software asset management capability for software and operating systems to ensure that software executes only from the authorized software inventory and all unauthorized software is blocked from executing on HUD's network.

Status

HUD previously reported that it was implementing a software management tool with an expected implementation date of quarter 2 of FY 2025; however, between quarter 2 and 3 of FY 2025, HUD personnel has stated that the tool would not meet the agency’s needs. Accordingly, HUD is looking at a new tool to implement this program and collaborating with the DHS continuous diagnostics and monitoring team to analyze options. HUD has not provided an estimated completion date.

Analysis

To fully address this recommendation, HUD must provide evidence that it has an automated whitelist and that the whitelist is implemented per the NIST Special Publication 800-167 or otherwise accept the risk of not controlling access to its network and document mitigating measures via a Risk-Based Decision memorandum.

HUD has defined a requirement in HUD Handbook 3257.1, Rev. 3, “Software License Management Policy” for the Configuration Control Management Board and Technical Review Committee to be responsible for maintaining the list of allowed and prohibited software. However, a tool to enforce this list is required to implement the recommendation.

The implementation of this recommendation will result in HUD having the capability to ensure only authorized software is used on HUD’s network based on its approved software asset listing.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Implement multifactor authentication mechanisms for all nonprivileged users who access information systems that process, store, or transmit PII.

Status

The Office of the Chief Information Officer reported that it has implemented a new software security solution to implement multifactor authentication, starting with a pilot on 15 FHA systems. In October 2024, HUD received additional funds through the Technology Modernization Fund for this project enterprise-wide. HUD is in the process of conducting baseline surveys for all 200+ systems to determine how to handle systems that need architectural adjustments to utilize the tool. This is assisting HUD in developing an agency-wide implementation plan, which is expected to take several years to implement.

Analysis

To fully address the recommendation, HUD must implement multifactor authentication enterprise-wide.

Implementation of this recommendation will result in an enterprise-wide identity and access management solution. Nonprivileged users will be required to use multifactor authentication methods to access HUD data, networks, and devices.

Implement multifactor authentication mechanisms for all privileged users who access information systems that process, store, or transmit PII.

Status

Analysis

To fully address this recommendation, HUD must implement multifactor authentication enterprise-wide.

Implementation of this recommendation will result in an enterprise-wide identity and access management solution. Privileged users will be required to use multifactor authentication methods to access HUD data, networks, and devices.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

HUD does not have a departmentwide policy for dealing with radon contamination. Instead, HUD relies on each program office to develop radon policies that align with HUD’s environmental regulations. The three program offices reviewed do not have consistent radon policies. Only Multifamily’s radon…

Develop and issue a departmentwide policy that notes that radon is a radioactive substance and outlines HUD's requirements to test for and mitigate excessive radon levels in accordance with 24 CFR 50.3(i)(1) and 58.5(i)(2)(i).

Corrective Action Taken

None Given.

Develop and provide training for applicable program staff, grantees, and PHAs on radon testing and mitigation requirements.

Develop and implement an effective radon policy to ensure that CPD program activities comply with the departmentwide policy on radon testing and mitigation requirements.

Update the current Multifamily radon policy to ensure that program activities comply with the departmentwide policy on radon testing and mitigation requirements.

Revise the current PIH radon policy to align with 24 CFR 50.3(i)(1) and 58.5(i)(2)(i).

Update the PIH radon policy to ensure that program activities comply with the departmentwide policy on radon testing and mitigation requirements.

Provide the MOU with EPA designed to address radon contamination.

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) modernization roadmap. A significant number of HUD’s mission-essential applications have not been modernized, which presents multiple sources of risk. These applications are hosted on legacy…

Oversight Area: HUD Business Functions

Develop an enterprise-wide IT modernization strategy that establishes a framework to align with the IT modernization roadmap.

Corrective Action Taken

In January, 2024, HUD provided an OCIO approved an IT Modernization strategy that established a framework that aligned with its IT modernization roadmap. The strategy addressed each of the recommendation components (a. roles and responsibilities, b. prioritization of modernization initiatives, c. coordination process between OCIO and program offices, d. phased approach, and e. how lessons learned will be captured.

Obtain the proper approval and communicate the IT modernization strategy to all appropriate stakeholders, including HUD program offices.

We audited the U.S. Department of Housing and Urban Development’s (HUD) oversight of public housing agencies’ compliance with the Lead Safe Housing Rule. The audit is part of the activities in our fiscal year 2019 audit plan. The audit objective was to determine whether HUD had adequate oversight…

Ensure that its staff appropriately determines exemptions from the Lead Safe Housing Rule and documents support of the determinations.

Corrective Action Taken

In June 2023, HUD publicly issued Notice 2023-16, Implementation of National Standards for the Physical Inspection of Real Estate (NSPIRE) Administrative Procedures, providing guidance covering the process and operational requirements for HUD’s public housing programs that clarifies for its staff (1) actions that should be taken by the PHA and (2) documentation that must be provided to support that a housing unit is exempt from the Lead Safe Housing Rule. The guidance describes the process that a PHA or property owners and/or agents must take when a NSPIRE inspection identifies deteriorated paint in a property or housing unit. Specifically, the PHA or property owners and/or agents should first verify that the property or housing unit is considered “target housing,” and if so, determine whether it is exempt from the Lead Safe Housing Rule. If an exemption applies, documentation such as, a lease or other residency agreement that affirms that the property is designated exclusively for occupancy by the elderly or persons with disabilities must be provided to HUD. Other residency agreements could include a HUD-approved designated housing plan, property deed or charter, or occupancy restrictions approved by HUD or the PHA’s board of commissioners. The PHA or property owners and/or agency must also affirm whether children under the age of 6 years reside in the property.

Ensure that its staff determines whether a child under 6 years of age resides in an exempted development. If a child is determined to reside in an exempted development take appropriate actions in accordance with its internal policies

Corrective Action Taken

The Office of Field Operations (OFO) updated the Lead-Based Paint Response Tracker’s Standard Protocol and Roles and Responsibilities to identify the roles and responsibilities of HUD’s headquarters and field office level staff in ensuring PHAs’ compliance with the Lead Safe Housing Rule (LSHR). The protocol provides that the OFO field office staff work directly with PHAs to resolve issues of noncompliance with the LSHR and other Lead-based paint (LBP) guidance by responding to or escalating questions/issues to the headquarters team, directing PHAs to available training and resources on HUD.gov or HUD Exchange, and working with PHAs to obtain sufficient documentation to close an LBP case in the LBP tracker promptly. In regards to a child under 6 years of age residing in an exempted development, staff from the field offices must upload supporting documentation determining whether a pregnant lady or child six years old or younger lives in the development, collect missing information, if applicable, coordinate with OFO team to close cases in the LBP response tracker, indicate in the LBP response tracker if the PHA has provided the documents or if the property is exempt and upload supporting documents.

Ensure that the 55 developments without sufficient support for an exemption either support the exemption status or complete the required lead-based paint inspections and provide the documentation to the appropriate field office.

Ensure that the remaining 244 developments’ exemption status is properly supported.

Ensure that the 382 potentially noncompliant developments are reported in its response tracking system and reviewed for compliance with the Lead Safe Housing Rule.

Implement adequate procedures and controls for monitoring public housing agencies’ compliance with the Lead Safe Housing Rule. Such procedures and controls should include but not limited to establishing timeframes for reporting potentially noncompliant developments in its tracking system and implementing corrective actions and resolution.

Develop a framework for taking administrative actions against public housing agencies that do not comply with HUD’s Lead Safe Rule.

Continue its efforts to identify and train staff on how to use the response tracker.

Continue its efforts to resolve technical issues that prevented the addition of new cases into the response tracker.

Establish policies, procedures, and controls for validating and correcting construction dates of the public housing developments in IMS-PIC. If the information is determined to be inaccurate, HUD should work with public housing agencies to update the data to ensure accuracy.

We audited the U.S. Department of Housing and Urban Development’s (HUD) fraud risk management program at the enterprise and program-office levels and assessed its overall maturity. Our objective was to determine HUD’s progress in implementing a fraud risk management framework at the enterprise and…

Perform a complete agency-wide fraud risk assessment (which incorporates the fraud risk assessments performed at the program level) and use the results to develop and implement an agency-wide plan to move HUD’s fraud risk management program out of the ad hoc phase.

Status

As of July 2025, HUD has cancelled its fraud risk management contracts and the Chief Risk Officer position was vacated under the Deferred Resignation Program. HUD is currently working to realign its business process and determining how it will address fraud risk management. While HUD had made progress in improving its fraud risk management program, as of July 2025, HUD has not provided an updated plan on how it will complete an agency-wide fraud risk assessment and undertake office-specific risk programs. The final action target date was September 30, 2024.

Analysis

To fully address this recommendation, HUD must provide evidence that it has performed an agency-wide fraud risk assessment performed at the program level, adopted and implemented its fraud risk assessment program departmental policy, and that each HUD program office has established office-specific risk programs.

Develop and implement a procedure to collect and analyze reported suspected instances of fraud, along with other relevant data points, that can be leveraged to develop more robust antifraud risk mitigation tools.

Communicate to HUD program staff the differences between HUD’s enterprise risk management, PIIA, and financial risk management risk assessment processes to ensure an understanding of their roles and responsibilities within HUD’s fraud risk management program.

Develop and implement activities to raise awareness of fraud, such as participating in organized antifraud conferences or a newsletter that includes instances of recent fraud in Federal programs.

Develop and implement a strategy for collecting and analyzing agency-wide data, to include subrecipient and beneficiary data, to identify trends and potential indicators of fraud across programs.

Collaborate with the Chief Risk Officer to conduct a workforce assessment to determine the level of dedicated full-time staff resources needed by the Chief Risk Officer to effectively (1) administer HUD’s enterprise and fraud risk management programs and (2) support program risk officers by increasing employee and stakeholder awareness of potential fraud schemes that could impact each program respectively.

If the workforce assessment determines that additional staff are needed, work with the Chief Risk Officer to staff the necessary positions.

According to the Centers for Disease Control and Prevention (CDC), lead-based paint and lead-contaminated dust are some of the most widespread and hazardous sources of lead exposure for young children in the United States. There is no safe blood lead level in children, and there is no cure for…

Oversight Area: Housing Health and Safety

Update HUD regulations, policies, and procedures following the regulatory process required by the amended Lead Safe Housing Rule, in consideration of CDC's lowered BLRV of 3.5 ug/dL.

Status

On January 17, 2025, HUD published a Federal Register notice to modify its EBLL threshold under its Lead Safe Housing Rule from to 5 to 3.5 micrograms of lead per deciliter of blood (µg/dL) for a child under the age of 6, consistent with the Centers for Disease Control and Prevention's current blood lead reference value of 3.5 µg/dL.

As of July 17, 2025, the Office of Lead Hazard Control and Healthy Homes (OLHCHH) informed HUD OIG that HUD has drafted a joint notice for HUD offices impacted by the modified elevated blood lead level (EBLL) threshold. These offices include OLHCHH, the Office of Community Planning and Development (CPD), the Office of Multifamily Housing Programs (MF), and the Office of Public and Indian Housing (PIH).

OLHCHH’s timeline to finish implementing the recommendation:

The notice will enter the clearance process by the end of August.
CPD, MF, PIH, and OLHCHH will publish the final joint notice by September 30, 2025.

The estimated completion date for these actions is September 30, 2025. The original estimated completion date was June 30, 2024, and was revised to account for the time required to (1) receive and review public comments on HUD’s proposed change to the EBLL threshold and (2) coordinate the implementation of the EBLL threshold change across the impacted HUD offices.

Analysis

To fully address this recommendation, OLHCHH must provide evidence that HUD has updated its regulations, policies, and procedures so that they are consistent with CDC’s lowered BLRV of 3.5 ug/dL.

Implementation of this recommendation will help ensure children living in public housing with EBLLs receive effective environmental interventions.

Create a plan and timeline that outlines OFO’s proposal to make necessary improvements to the EBLL tracker, such as moving it to a different platform.

Provide field office staff access to historical data in the EBLL tracker to be readily available as needed, with adequate protection of PII.

Update the EBLL tracker to show whether one or multiple children have an EBLL and whether the unit, building, or development previously had an EBLL reported.

Update the EBLL tracker by including which data fields are required, establishing what type of information can be entered into each data field, and disallowing case closure if required information is missing.

PIH in coordination with other HUD offices as necessary, research and address potential causes of the variance in the number of EBLL cases among States on the EBLL tracker and identify solutions that are within HUD's control.

Corrective Action Taken

On September 10, 2025, HUD took action to close priority recommendation 6 from HUD OIG Evaluation Report 2021-OE-0011b, Improvements are Needed to HUD’s Processes for Monitoring Elevated Blood Lead Levels and Lead-Based Paint Hazards in Public Housing, issued February 28, 2023. HUD’s Office of Public and Indian Housing, Office of Field Operations (OFO), conducted research and comparative analysis of nine identified field offices and PHAs with unreported elevated blood lead levels (EBLL) and obtained the missing documentation and entered it into the EBLL tracker. Additionally, OFO revised the EBLL tracker job aid, published new EBLL guidance, held office hours and group and individual trainings for OFO staff, and developed a PowerBI dashboard to accompany the EBLL tracker to allow for the visual monitoring of EBLL cases with outstanding or nearing deadlines. These corrective actions have increased the effectiveness of the EBLL tracker and enhanced the accuracy of HUD records. HUD can now ensure that EBLL cases are both reported and recorded in the EBLL tracker appropriately so that it can track progress towards addressing EBLLs and close EBLL cases in a timely manner.

Create a plan and timeline that outlines OFO’s proposal to move the LBPR tracker to a different platform.

Develop a timeliness standard in the LBPR tracker to establish expectations for how often field office staff must reach out to PHAs on the LBPR tracker to discuss measures that will resolve cases in a timely manner.

We audited the U.S. Department of Housing and Urban Development’s (HUD) Real Estate Assessment Center’s inspection process. The audit objectives were to determine whether the Center (1) ensured that public housing properties were inspected within required timeframes before the coronavirus disease…

Oversight Area: HUD Business Functions

Prioritize the inspection of public housing properties that were (1) not included in the NSPIRE demonstration but were identified as high priority under the Center’s Big Inspection Plan and (2) approved to participate under the NSPIRE demonstration that the Center was unable to inspect by March 31, 2023.

Implement adequate policies, procedures, and controls to ensure that public housing properties will be inspected within required timeframes.

Status

As of July 2025, according to HUD, all development and enhancement of the NSPIRE software system are presently on hold pending Administrative guidance on HUD funded software system improvements. Additionally, the required software changes recommended under this finding depend on the final Public Housing Assessment System (PHAS) rule, but most regulatory work has been paused for review per Executive Order from the Administration. Pending the required resources and funding approval, HUD cannot move forward at this time. According to HUD, it has planned for and proposed the needed improvements to meet this recommendation and will provide updates when available. The current final action target date is September 30, 2025.

Analysis

To fully address this recommendation, HUD must provide evidence demonstrating that it has implemented control activities that ensure public housing properties are inspected within the required timeframes.

Implementation of this recommendation will result in HUD accurately tracking the dates on which public housing properties should be inspected and that they are timely completed.

Due to the uncertainty of when software changes to NSPIRE can take place to enforce the timing of inspections, REAC cannot enforce the requirements of inspection timing.

Open Recommendations by Oversight Area

Oversight Area

Status

Priority

FHA Insured at Least $13 Billion in Loans to Ineligible Borrowers With Delinquent Federal Tax Debt

FHA Insured $1.9 Billion in Loans to Borrowers Barred by Federal Requirements

HUD Lacked Adequate Oversight of Multifamily Housing Properties With Failing REAC Scores or Life-Threatening Deficiencies

HUD Fiscal Year 2020 Federal Information Security Modernization Act of 2014 (FISMA) Evaluation Report

HUD Program Offices’ Policies and Approaches for Radon

HUD IT Modernization Roadmap Evaluation Report

HUD Lacked Adequate Oversight of Public Housing Agencies’ Compliance With the Lead Safe Housing Rule

Improvements are Needed in HUD’s Fraud Risk Management Program

Improvements are Needed to the U.S. Department of Housing and Urban Development's Processes for Monitoring Elevated Blood Lead Levels and Lead-Based Paint Hazards in Public Housing

Improvements Are Needed To Ensure That Public Housing Properties Are Inspected in a Timely Manner

Stay Informed