HUD OCIO should review its security training program and determine whether it should provide general cybersecurity awareness training to external users of its systems and data (IG FISMA metric 44).

Issue guidance to PHAs clarifying the timing of unit inspections and lead-based paint visual assessments to address the misinterpretation caused by the terms “annual” and “every 12 months.”

Implement a process to identify teleworkers most at risk of receiving incorrect locality payments, verify that their official duty stations are correct and they are reporting to their official duty stations as required, and if necessary, correct their locality payments.

Provide evidence to support that the owners corrected the 46 deficiencies for the 20 units with outstanding deficiencies. If the owners fail to provide evidence that they made the required corrections, HUD should require the Authority to implement its HAP enforcement procedures and provide supporting documentation to HUD evidencing that it did so.

Improve its quality control process for monitoring its inspectors to enhance the effectiveness of its unit inspections and ensure that all units meet HUD’s and its own requirements to prevent more than $34 million in Program funds from being spent on units that do not meet HQS over the next year. This process should include but not be limited to procedures (1) requiring its staff to use the quality control inspection results to evaluate and monitor the performance of the Authority’s inspectors, along with maintaining adequate supporting documentation on feedback provided to the inspectors for recurring inspection deficiencies and (2) for evaluating the training provided to its inspectors to determine what improvements are needed to ensure that unit deficiencies are detected.

Pursue collection from the applicable owners or reimburse its HCV Program from non-Federal funds $106,477 ($180,309 - $73,832) in inappropriate HAP

Provide evidence to HUD that it has improved its controls and procedures for its stop payment process to ensure that (1) payments to owners comply with its HCV Program administrative plan and HUD requirements and (2) it maintains documentation to support stop payments and resumption of those payments for each unit as applicable.

Provide documentation to support that HAP was appropriately paid to the owners for the 66 units that had more than one stop payment. If additional HAP was inappropriately paid, the Authority should pursue collection from the applicable owners or reimburse its HCV Program from non-Federal funds.

Review its records to confirm whether it had cases of children with EBLLs during our audit period and work with the owner(s) of the HCV Program units to provide required documentation to HUD.

Update publications and educational materials to owners to ensure that they understand their reporting responsibilities to HUD regarding confirmed cases of children with EBLLs.

Develop and implement procedures and controls for coordinating with public health departments and managing cases of children with EBLLs, including monitoring owners for compliance with the requirements of the LSHR.

Work with HUD’s OLHCHH to provide technical assistance to the Authority’s staff to develop and implement procedures and controls for monitoring owners for compliance with HUD’s EBLL requirements and attempting to collaborate with local health departments to identify cases of EBLL in children under 6 years of age under its HCV Program.

Establish a separate fraud risk management framework or evaluate and build upon its ERM framework by incorporating fraud risk management practices that are consistent with the principles of GAO’s Standards for Internal Control in the Federal Government (Green Book), including developing a fraud risk management framework in alignment with best practices identified in GAO’s A Framework for Managing Fraud Risks in Federal Programs and the Chief Financial Officers Council’s Antifraud Playbook.

Obtain training or technical assistance on the implementation of fraud risk management practices consistent with the principles of GAO’s Standards for Internal Control in the Federal Government (Green Book).

Work with HUD’s Office of Lead Hazard Control and Healthy Homes to provide training for the Authority’s staff on the appropriate testing methodology for confirming that a child has an EBLL and to provide technical assistance on procedures and controls to address the issues cited in this finding.

Work with HUD’s Office of Lead Hazard Control and Healthy Homes to provide training for the Authority’s staff on the management of lead-based paint, including technical assistance with developing and implementing procedures and controls to address the issues cited in this finding.

Pursue collection from the applicable owner or reimburse its HCV Program $5,194 from non-Federal funds for HAP that was not properly stopped for two units with outstanding HQS deficiencies.

Provide support showing whether HAP was appropriately stopped for the four units cited in the finding or reimburse or pursue collection of $10,233 from non-Federal funds for HAP to owners with outstanding HQS deficiencies.

Update Handbook 4000.1 to require servicers to share information regarding foreclosure moratoriums with borrowers.

Simplify the process for accessing its FAQs on Single Family’s website, including adding a clickable link on its website home page that will take borrowers directly to the FAQs.