Determine if general support system privacy threshold assessments or privacy impact assessments should be completed; if not, document the rationale

Develop the technical capability to identify, inventory, and monitor the existence of PII within the HUD environment

Develop and implement a process to inventory all agency PII holdings not less than annually.

Renew the PII minimization effort, to include a prioritization by the SAOP of specific minimization initiatives

Require all system owners to review the records retention practices for each information system and take any corrective actions necessary to ensure adherence to the applicable records retention schedule

A. Issue a clean desk policy prohibiting unattended and unsecured sensitive data in workplaces. B. Implement procedures to enforce the clean desk policy.

Designate an unclaimed asset recovery official as required by the Treasury Financial Manual.

Work with Treasury to identify and obtain reimbursement for FHA’s and Ginnie Mae’s portion of the $1.9 million in HUD funds that Treasury collected.

Establish and implement policies and procedures to ensure that all of its unclaimed funds are claimed and the money is appropriately routed to put $2.2 million to better use. At a minimum, these policies and procedures should address what constitutes FHA and Ginnie Mae funds, ensure that these funds are returned to FHA or Ginnie Mae as appropriate, and include policies to claim co-owned funds with any appropriate thresholds or limitations.

Update the occupant emergency plan so that it lists the ways occupants are to report fires or other emergencies

Periodically provide training on the occupant emergency plan once it is updated

Create a process to help ensure that fire drills for the Weaver Building occur every year

We recommend that the Chief Financial Officer determine whether the summary expenditures totaling $160,360,714, which exceeded the grant round obligations for the two grantees, were ADA violations. If the transactions were violations, action should be taken as required by the ADA.

We recommend that the Chief Financial Officer determine whether the revised and completed detail transactions totaling to $435,263,268, which occurred before and after grant rounds obligation and expenditure dates, were ADA violations. If the transactions were violations, actions should be taken as required by the ADA.

We recommend that the Chief Financial Officer determine whether the revised and completed transactions totaling $496,913,235 and made more than a year after the original voucher entry were GAAP violations. If the transactions were violations, appropriate actions should be taken, including but not limited to adjusting the transactions in LOCCS and HUD’s financial statements.

We recommend that the Chief Financial Officer enter a 24-month expiration term into LOCCS for Disaster Recovery funding provided by the 2017 Act and monitor to ensure that expenses are not entered before or after the grant period.

We recommend that the Chief Financial Officer require CPD to enter into a separate grant agreement for each grantee’s round of disaster funding for funding provided by the 2017 and 2018 Acts.

We recommend that the Chief Financial Officer require CPD to monitor the detailed voucher transactions in the DRGR system to ensure that grantees appropriately record transactions.

We recommend that the Chief Financial Officer require CPD to prohibit grantees from revising completed vouchers in the DRGR system and require adjustments to be entered as new vouchers into the DRGR system, which will ensure that LOCCS records and tracks revisions.

Deobligate all obligations marked for deobligation during the departmentwide OOR, including as much as $2,266,017 in 100 administrative obligations marked for deobligation as of September 30, 2017.