HUD did not comply with PIIA because it reported an unknown payment estimate for PIH-TBRA and MF-PBRA based on data matching but did not perform enough testing to report compliant improper payment and unknown payment estimates for the programs.  As a result, HUD could not effectively implement corrective actions and other OMB requirements for programs above the statutory threshold that are designed to improve payment accuracy.  HUD determined that these programs were susceptible to significant improper and unknown payments based on HUD’s own risk assessment.

The U.S. Department of Housing and Urban Development (HUD) Office of Inspector General (OIG) conducted an evaluation of the operational effectiveness of information technology (IT) security controls for the HUDUSER system, which is operated by HUD’s Office of Policy Development and Research (PD&R).  The OIG identified four significant weaknesses involving website security, underscoring the need to strengthen technical security controls.  To address these findings, we provide eight new recommendations, which will be formally tracked by our office.

We audited the U.S. Department of Housing and Urban Development’s (HUD) Office of Single Family Housing’s efforts to increase the supply of affordable housing.  Our audit objective was to determine whether HUD met its intended outcome to increase the supply of affordable housing to owner-occupants, governmental entities, and HUD-approved non-profits by expanding the exclusive listing periods for its Real Estate Owned (REO) properties and Claims Without Conveyance of Title (CWCOT) program.

HUD OIG is conducting the FY 2026 evaluation of the HUD's information security (InfoSec) program and practices. FISMA requires all IGs to assess the effectiveness of the InfoSec program of their respective Federal agency on an annual basis.

We contracted with the independent public accounting firm of Sikich CPA LLC to audit the financial statements of FHA as of and for the fiscal year ending September 30, 2025, and to provide reports on FHA’s (1) internal control over financial reporting and (2) compliance with laws, regulations, contracts, and grant agreements and other matters.  Our contract with Sikich required that the audit be performed in accordance with U.S. generally accepted government auditing standards, Office of Management and Budget audit requirements, and the Financial Audit Manual of the U.S.

HUD OIG is auditing HUD's compliance with the Payment Integrity Information Act of 2019 (PIIA) for fiscal year 2025. PIIA helps agencies identify improper payments, which could impact HUD’s beneficiaries and ultimately undermines the integrity of HUD’s programs, which hinders HUD in fully achieving its mission. Our objectives are to assess (1) whether HUD has met all requirements of PIIA for fiscal year 2025 and OMB Circular A-123 Appendix C (M-21-19), and (2) HUD’s efforts to prevent and reduce improper and unknown payments.

 

HUD OIG is conducting an evaluation of HUD’s processes related to the Buy America Preference of the Build America, Buy America Act (BABA). Our evaluation will focus on Buy America Preference processes and applicable grants awarded on or after November 15, 2021. Our evaluation objective is to assess HUD’s processes, specifically those in the Office of Community Planning and Development (CPD), Office of Public and Indian Housing (PIH), Office of Housing (Housing), and Office of Lead Hazard Control and Healthy Homes (OLHCHH), related to the BABA.
 

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program. FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies.

We contracted with the independent public accounting firm Sikich CPA LLC to audit the financial statements of Ginnie Mae as of and for the years ending September 30, 2025 and 2024, and to provide reports on Ginnie Mae’s (1) internal control over financial reporting and (2) compliance with laws, regulations, contracts, and grant agreements and other matters. Our contract with Sikich required that the audit be performed in accordance with U.S. generally accepted auditing standards, Office of Management and Budget audit requirements, and the Financial Audit Manual of the U.S.