We conducted this evaluation to assess the maturity of HUD’s Robotic process automation (RPA) activities and determine whether HUD had implemented related controls to address technology and program management risks.  RPA is a software technology used to emulate human actions on a computer.  RPA software programs, referred to as “bots,” can complete repetitive tasks quickly and consistently, freeing up employees to work on other,…

We conducted an attestation review of the U.S. Department of Housing and Urban Development’s drug control accounting for the fiscal year ended September 30, 2022.  We performed this review pursuant to section 705(d) of Public Law 105-277, which requires National Drug Control Program agencies to submit to the Director of ONDCP a detailed accounting of all funds spent by the agencies for National Drug Control Program activities during the…

We audited the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) infrastructure to support mandatory telework. During mandatory telework, more employees simultaneously needed remote access to HUD’s network and agency resources for an extended period, which presented unique risks and security requirements. While HUD is no longer operating under mandatory telework, understanding the challenges it faced is key to…

We performed a review of the U.S. Department of Housing and Urban Development’s (HUD) monitoring and tracking of Continuum of Care (CoC) grantees that have been slow to spend their grant funds.  Our objectives were to determine whether HUD was effectively tracking and monitoring CoC grant spending and to determine the impact of COVID-19 on CoC grantee spending.HUD generally tracked and monitored its grantees; however, it did not prioritize…

As part of a Council of the Inspectors General on Integrity and Efficiency (CIGIE) Disaster Assistance Working Group cross-cutting initiative, we summarized the conclusions, findings, and recommendations of 28 reports related to the Federal Government’s natural disaster preparedness and response issued by 7 Offices of Inspector General (OIGs).  The seven participating OIGs included U.S. Departments of Defense, Health and Human…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to assess…

In coordination with the Pandemic Response Accountability Committee, we conducted an audit to identify potential fraud schemes that could affect HUD’s pandemic funds.  We reviewed the funds appropriated by the Coronavirus Aid, Relief, and Economic Security (CARES) Act and the American Rescue Plan (ARP) Act for the Tenant-Based Rental Assistance (TBRA), Project-Based Rental Assistance (PBRA), HOME Investment Partnerships, and Public Housing…

We audited the U.S. Department of Housing and Urban Development’s (HUD) Community Development Block Grant Coronavirus Aid, Relief, and Economic Security (CARES) Act program.Our audit objective was to determine what challenges grantees faced in using program funds for activities that prepare for, prevent, or respond to the coronavirus and its impact.  We used a survey questionnaire to gather feedback and insight directly from 1,047 program…

We audited the State of North Carolina’s Community Development Block Grant Disaster Recovery (CDBG-DR) funds.  We initiated this audit as part of our commitment to helping the U.S. Department of Housing and Urban Development (HUD) address its top management challenges and to support HUD’s strategic objective to support effectiveness and accountability in long-term disaster recovery.  Further, Congress has expressed strong interest in…

We audited the U.S. Department of Housing and Urban Development’s (HUD) Emergency Solutions Grants Coronavirus Aid, Relief, and Economic Security Act (CARES Act) (ESG-CV) program. Our audit objective was to determine what challenges ESG-CV grant recipients faced in implementing the program and using grant funds. We used a survey questionnaire to gather feedback and insight directly from the 362 recipients of ESG-CV grants. At the time we…

We audited the State of Florida’s Housing Repair and Replacement Program (HRRP), one of the programs that the State developed to address its unmet disaster recovery housing needs because of Hurricane Irma in 2017.  We audited this program due to the large amount of Community Development Block Grant Disaster Recovery (CDBG-DR) funding allocated of $346.2 million.  Our audit objective was to determine whether the State administered its…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to assess…

The Federal Information Security Modernization Act of 2014 (FISMA) requires all federal agencies to conduct independent security technical verification testing on a sampling of information systems annually.  In conjunction with our fiscal year 2021 FISMA evaluation (2021-OE-0001), we conducted a targeted security testing assessment of sample systems that resulted in a Topic Brief.  The objective of this application vulnerability…

We audited the Los Angeles Homeless Services Authority’s Continuum of Care (CoC) program.  The audit was initiated because of the homelessness crisis in the City of Los Angeles, which has the highest number of unsheltered people in the United States.  In addition, the Los Angeles city controller issued a report in 2019, criticizing the Authority for falling short of City of Los Angeles homeless outreach goals.  (See Background…

We audited the U.S. Department of Housing and Urban Development (HUD), Office of Community Planning and Development’s (CPD) oversight and monitoring of its Community Development Block Grant Disaster Recovery (CDBG-DR) slow-spending grantees.  This was a self-initiated audit consistent with our oversight activities and current top priority areas.  Our objective was to assess CPD’s monitoring and oversight tools related to the progress…

We audited the City of Houston’s Hurricane Harvey Community Development Block Grant Disaster Recovery (CDBG-DR) program.  We initiated this audit as part of our commitment to helping the U.S. Department of Housing and Urban Development (HUD) address its top management challenges and to support HUD’s strategic objective to support effectiveness and accountability in long-term disaster recovery.  Further, Congress has expressed strong…

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) ability to effectively complete information technology (IT) acquisitions.  HUD’s IT systems and its modernization plans depend heavily on contractors, yet HUD has historically faced significant challenges with implementing effective acquisition processes. Therefore, HUD’s acquisition capacity represents a key potential risk within HUD’s IT environment. We found that a…

On March 27, 2020, the Coronavirus Aid, Relief, and Economic Security (CARES) Act made available $5 billion in supplemental CDBG funding for grants to prevent, prepare for, and respond to the coronavirus pandemic (CDBG-CV grants).  Because of similarities, we reviewed 132 CDBG-DR program audits and evaluations issued from May 2002 to March 2020 to summarize the common CDBG-DR program weaknesses and risks for CPD to consider to help its…

We conducted this engagement in coordination with the Pandemic Response Accountability Committee (PRAC) to gain an understanding of the U.S. Department of Housing and Urban Development’s (HUD) fraud risk management practices and develop an inventory of fraud risks that HUD had not already identified for the funds appropriated by the Coronavirus Aid, Relief, and Economic Security (CARES) Act for the Community Development Block Grant (CDBG) and…

The brief provides an update to the original 2018 topic brief, and highlights key challenges faced by HUD in managing and improving its IT program.  The brief is not based on new work, but is a summary of 83 reports and 788 recommendations from past HUD OIG and GAO reports. It discusses the present IT environment at HUD, previously identified and new IT-related challenges, and HUD’s efforts and progress in addressing these challenges.…