We conducted this evaluation to assess the maturity of HUD’s Robotic process automation (RPA) activities and determine whether HUD had implemented related controls to address technology and program management risks.  RPA is a software technology used to emulate human actions on a computer.  RPA software programs, referred to as “bots,” can complete repetitive tasks quickly and consistently, freeing up employees to work on…

We audited the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) infrastructure to support mandatory telework. During mandatory telework, more employees simultaneously needed remote access to HUD’s network and agency resources for an extended period, which presented unique risks and security requirements. While HUD is no longer operating under mandatory telework, understanding the challenges it faced…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation…

We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the Geospatial Data Act of 2018 (the Act).Our audit objective was to determine whether HUD met the 13 responsibilities stated in the Act with regard to its collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data.  The Act also generally requires covered agencies provide access to geospatial data…

We audited the State of North Carolina’s Community Development Block Grant Disaster Recovery (CDBG-DR) funds.  We initiated this audit as part of our commitment to helping the U.S. Department of Housing and Urban Development (HUD) address its top management challenges and to support HUD’s strategic objective to support effectiveness and accountability in long-term disaster recovery.  Further, Congress has expressed strong…

We audited the State of Florida’s Housing Repair and Replacement Program (HRRP), one of the programs that the State developed to address its unmet disaster recovery housing needs because of Hurricane Irma in 2017.  We audited this program due to the large amount of Community Development Block Grant Disaster Recovery (CDBG-DR) funding allocated of $346.2 million.  Our audit objective was to determine whether the State…

We audited the City of Houston’s Hurricane Harvey Community Development Block Grant Disaster Recovery (CDBG-DR) program.  We initiated this audit as part of our commitment to helping the U.S. Department of Housing and Urban Development (HUD) address its top management challenges and to support HUD’s strategic objective to support effectiveness and accountability in long-term disaster recovery.  Further, Congress has expressed…

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) ability to effectively complete information technology (IT) acquisitions.  HUD’s IT systems and its modernization plans depend heavily on contractors, yet HUD has historically faced significant challenges with implementing effective acquisition processes. Therefore, HUD’s acquisition capacity represents a key potential risk within HUD’s IT environment. We…

In February 2021, the Office of the Chief Information Officer (OCIO) identified funding risks with the development contract under which HUD contracted for Federal Housing Administration (FHA) Catalyst’s development.  In response, HUD officials took steps to slow FHA Catalyst spending on the contract while awaiting approval for additional contract funds.  Despite efforts to slow project spending, it was not enough to prevent…