Evaluation of HUD's Security Assessment and Authorization (SA&A) Program | Office of Inspector General, Department of Housing and Urban Development

An official website of the United States government Here’s how you know

The .gov means it’s official.

Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.

The site is secure.

The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Hotline

Crime, Fraud, Waste, and Abuse

Title	Announced	Priority Area	Program Area	State
Evaluation of HUD's Security Assessment and Authorization (SA&A) Program	06/2026	Sustaining Progress in Finance and IT Transformation	Other	District of Columbia

Summary

HUD OIG is evaluating HUD's security assessment and authorization (SA&A) program within the Office of the Chief Information Officer (OCIO). The SA&A program is essential for ensuring systems meet security requirements and mitigate cybersecurity risks. Our evaluation objective is to assess the effectiveness of the SA&A program, including the causes for expired information system authorizations to operate (ATO) and the state of their remediation.