The HUDUSER System Had Exploitable IT Security Weaknesses
The U.S. Department of Housing and Urban Development (HUD) Office of Inspector General (OIG) conducted an evaluation of the operational effectiveness of information technology (IT) security controls for the HUDUSER system, which is operated by HUD’s Office of Policy Development and Research (PD&R). The OIG identified four significant weaknesses involving website security, underscoring the need to strengthen technical security controls…
May 08, 2026
Report
#2026-OE-0002
HUD Has Met the Responsibilities of the Geospatial Data Act of 2018 During the Implementation Phase
The Geospatial Data of 2018 (the Act) governs the collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data of covered agencies, including the U.S. Department of Housing and Urban Development (HUD). We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to meet the geospatial data requirements stated in the Act. The Act requires the Inspector General of a…
September 20, 2024
Report
#2024-LA-0002
Risk Assessments of HUD's Charge Card Programs
As required by the Charge Card Abuse Prevention Act of 2012, Public Law 112-194, we performed risk assessments of the U.S. Department of Housing and Urban Development’s (HUD) purchase and travel card programs. In our risk assessments, we analyzed and identified the risks of illegal, improper, or erroneous purchases. Using information provided by HUD, we assessed risk for eight different risk factors and ranked each risk factor as…
March 29, 2024
Report
#2024-FO-0005