Correct the reporting and use of proceeds received from the current lease, thereby putting $1,278,260 to better use. This requirement includes properly recording the proceeds as restricted nonrental program income on its financial data schedule, placing any unspent funds into an account subject to a general depository agreement until spent, providing a detailed accounting of the use of the proceeds, reporting the use of any proceeds used for demolition or other expenses in a revised 5-year annual plan, and making any other updates needed to ensure that funds are properly recorded and used.

Repay from non-Federal funds any proceeds used for unallowable expenses identified in recommendation 1C.

Submit a Section 18 application to obtain HUD approval of any proposed new lease agreement prior to its execution, in compliance with the United States Housing Act of 1937 and 24 CFR Part 970.

Consider and take additional action if the Authority does not complete recommendations 1A and 1B before submitting its next annual plan, including withholding further awards for its program, conditioning future grant funds, and other remedies that may be legally available until the Authority completes recommendations 1A and 1B.

Support that $2,870,374 paid for goods and services was reasonable in accordance with applicable requirements or repay its Public Housing Operating Fund or Capital Fund programs from non-Federal funds for any amount that it cannot support or that is not considered reasonable.

Support that $1,236,210 in funds not yet spent on the contracts reviewed, along with any new procurements, would be reasonable or reallocate the funds to ensure that they will be put to their intended use

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Define and communicate policies and procedures to ensure that its products, system components, systems, and services comply with its cybersecurity and SCRM requirements. This recommendation includes:

• Identification and prioritization of externally provided systems (new and legacy), components, and services.
• How HUD maintains awareness of its upstream suppliers.
• The integration of acquisition processes tools, and techniques to use the acquisition process to protect the supply chain.
• Contract tools or procurement methods to confirm that contractors are meeting their obligations (derived from OIG FISMA metric 14).

Status

The Office of the Chief Information Officer (OCIO) estimated it would complete corrective action for this recommendation by August 2023. In May 2024, HUD OIG reviewed the OCIO progress in closing this recommendation as part of the FY 2024 FISMA evaluation. At that time, OCIO provided its draft SCRM Policy, draft SCRM Procedures, final SCRMES Charter, and a SCRM Technical Roadmap. Additionally, HUD provided agency-specific clauses. As of January 2025, HUD has not issued finalized SCRM policies and procedures.

Analysis

To fully address this recommendation, HUD must establish that it has defined and communicated policies and procedures to ensure that its products, system components, systems, and services comply with its cybersecurity and SCRM requirements.

Implementation of this recommendation will result in HUD continuing to mature in supply chain risk management, establishing and defining the policies and procedures of SCRM requirements as they relate to systems and system components.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.