U.S. flag

An official website of the United States government Here’s how you know

The .gov means it’s official.

Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.

The site is secure.

The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Date Issued
Mayo 22, 2023
OIG Component Office
Develop and complete a detailed plan and timeline for completing compliant PIH-TBRA and PBRA program estimates and ensure that the improper payment council prioritizes completion of the plan in time for fiscal year 2023 reporting.
Program Office
Chief Financial Officer
Questioned Costs
Better Funds Use
Publication Report Number

Related Recommendations

Recomendation Status Date Issued Summary
2023-FO-0009-001-A Abierta Mayo 22, 2023

Establish an improper payment council within HUD that consists of senior accountable officials from across the Department with a role in the effort that would work to identify risks and challenges to compliance and identify solutions as a collaborative group.


HUD agreed to capture and monitor the risks related to improper payment compliance through the Risk Management Council (RMC), chaired by the HUD Deputy Secretary, which meets quarterly. Consistent with guidance issued by the GAO in June 2023 (GAO-23-106585), HUD will assign Senior Accountable Officials at the Program Office level. While we are generally agreeable to this being handled through the Risk Management Council, we informed HUD that we needed assurance that the Risk Management Council will accept this as a risk and work on it in the immediate future. We communicated our position to OCFO who agreed to update the proposed language and include as evidence deliverables from the Chief Risk Officer showing that this risk is being worked on. However, OCFO has not yet updated they’re corrective action plan to reflect our agreement. As of January 2, 2024, we do not have official agreement on HUD’s corrective actions, and therefore do not have a final action target date.


To fully address this recommendation, HUD must provide evidence that it has established a process by which the Risk Management Counsel (RMC) has accepted that improper payment compliance as a risk, identifies sub-risks and challenges to achieving compliance, identifies solutions to those risks and challenges, and provide evidence that the RMC is implementing the solutions that will position HUD towards compliance.

Implementation of this recommendation will result in HUD better safeguarding taxpayer dollars and decrease improper payments.

2023-FO-0009-001-C Cerrado Mayo 22, 2023 Develop a secure platform for the collection and storage of PIIA data that contain PII and formally assign a staff with adequate training and skillsets to administer the data and application (including maintaining and managing access controls of a chosen application that will be used to store the PIIA data with PII).
2023-FO-0009-002-A Cerrado Mayo 22, 2023 Reevaluate the methodology and reassess the weight assigned to each risk factor to ensure that appropriate weight is given to risks associated with non-Federal administrators or consider doing one risk assessment for HUD’s internal payment cycle and another risk assessment for the non-Federal entities that administer HUD’s program funds.
2023-FO-0009-002-B Cerrado Mayo 22, 2023 Until program-specific fraud risk assessments are completed, revise the PIIA fraud risk questionnaire process to compensate for the lack of program-specific fraud risk assessments.
2023-FO-0009-002-C Cerrado Mayo 22, 2023 Reassess the Homeless Assistance Grants program as part of the fiscal year 2023 risk assessment.