We audited the U.S. Department of Housing and Urban Development’s (HUD) temporary policy for endorsement of loans with COVID-19 forbearance activity because an analysis of data in HUD’s systems showed that there may have been loans that did not comply with the policy’s requirements.  The policy was one aspect of HUD’s broader emergency response to COVID-19, which also included an eviction moratorium and loan forbearance for borrowers…

We conducted this evaluation to assess the maturity of HUD’s Robotic process automation (RPA) activities and determine whether HUD had implemented related controls to address technology and program management risks.  RPA is a software technology used to emulate human actions on a computer.  RPA software programs, referred to as “bots,” can complete repetitive tasks quickly and consistently, freeing up employees to work on other, higher…

We found 13 properties with consecutive REAC scores below 60 that were missing the required flags in HUD’s Active Partners Performance System (APPS) for unacceptable physical condition.  This condition occurred because HUD did not have a quality control program to ensure that the account executives manually entered the flags into APPS and there was no automated process for flagging a property once it received the second consecutive below-…

We audited the U.S. Department of Housing and Urban Development’s (HUD) efforts to proactively communicate information related to the coronavirus disease of 2019 (COVID-19) to homeowners with Federal Housing Administration (FHA)-insured mortgages.  We initiated this work based on a U.S. Government Accountability Office report that identified helping borrowers understand the protections available to them as a key challenge and prior audit…

We audited the U.S. Department of Housing and Urban Development’s (HUD) information technology (IT) infrastructure to support mandatory telework. During mandatory telework, more employees simultaneously needed remote access to HUD’s network and agency resources for an extended period, which presented unique risks and security requirements. While HUD is no longer operating under mandatory telework, understanding the challenges it faced is key to…

We contracted with the independent public accounting firm of CliftonLarsonAllen LLP (CLA) to audit the financial statements of FHA as of and for the fiscal years ended September 30, 2022 and 2021, and to provide reports on FHA’s 1) internal control over financial reporting; and 2) compliance with laws, regulations, contracts, and grant agreements and other matters.  Our contract with CLA required that the audit be performed in accordance…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to assess…

We conducted a limited review of nursing home owners to identify their operational challenges and needs of nursing homes in responding to the Coronavirus Disease 2019 (COVID-19) pandemic.  Our objective was to determine the biggest challenges operators of Section 232 nursing home facilities face related to the COVID-19 pandemic and whether nursing homes are prepared to meet their future financial obligations.  Most of the owners who…

Develop a control to detect loans that did not maintain the required flood insurance to put $1.5 billion to better use by avoiding potential future costs to the FHA insurance fund from inadequately insured properties. Corrective Action Taken In November 2022, FHA published the Acceptance of Private Flood Insurance for FHA-Insured Mortgages final rule (Docket No. FR-6084-F-02) in the Federal Register and issued Mortgagee Letter 2022-18,…

The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies. We conducted this evaluation to assess…

The Federal Information Security Modernization Act of 2014 (FISMA) requires all federal agencies to conduct independent security technical verification testing on a sampling of information systems annually.  In conjunction with our fiscal year 2021 FISMA evaluation (2021-OE-0001), we conducted a targeted security testing assessment of sample systems that resulted in a Topic Brief.  The objective of this application vulnerability…

We audited the U.S. Department of Housing and Urban Development’s (HUD) oversight of Federal Housing Administration (FHA) refunds based on a hotline complaint alleging that HUD was trying to make it difficult for claimants to obtain refunds or discourage them from pursuing the refunds, which are due to eligible homeowners from the unearned portion of the upfront mortgage insurance premium paid.  Our audit found the allegations from the…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General (OIG), completed an audit to determine whether FHA-insured borrowers properly received the COVID-19-related forbearance.  The Coronavirus Aid, Relief, and Economic Security Act (CARES Act), signed into law on March 27, 2020, provided a mortgage payment forbearance option for all borrowers who suffered a financial hardship due to the COVID-19 national…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General (OIG), completed a corrective action verification (CAV) of recommendations from four prior home equity conversion mortgage (HECM) audit reports.  The CAV was initiated because protecting the Federal Housing Administration (FHA) mutual mortgage insurance fund is one of HUD’s top management challenges.  The prior audits determined that HUD lacked…

We contracted with the independent public accounting firm of CliftonLarsonAllen LLP (CLA) to audit the financial statements of FHA as of and for the fiscal years ended September 30, 2021 and 2020, and to provide reports on FHA’s 1) internal control over financial reporting; and 2) compliance with laws, regulations, contracts, and grant agreements in its financial reporting.  Our contract with CLA required that the audit be performed in…

We reviewed the U.S. Department of Housing and Urban Development’s (HUD) ability to effectively complete information technology (IT) acquisitions.  HUD’s IT systems and its modernization plans depend heavily on contractors, yet HUD has historically faced significant challenges with implementing effective acquisition processes. Therefore, HUD’s acquisition capacity represents a key potential risk within HUD’s IT environment. We found that a…

We audited lender reporting of COVID-19 forbearances for Federal Housing Administration (FHA)-insured loans in the Single Family Default Monitoring System (SFDMS).  We compared default reporting data from SFDMS to loan data provided by five sampled servicing lenders that serviced a third of the FHA single-family portfolio.  Our audit objective was to determine whether COVID-19 forbearance data available in SFDMS were consistent with…

The brief provides an update to the original 2018 topic brief, and highlights key challenges faced by HUD in managing and improving its IT program.  The brief is not based on new work, but is a summary of 83 reports and 788 recommendations from past HUD OIG and GAO reports. It discusses the present IT environment at HUD, previously identified and new IT-related challenges, and HUD’s efforts and progress in addressing these challenges.…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General, audited HUD’s Office of Multifamily Housing Programs’ health and safety complaint process.  We conducted this audit due to a July 2019 explosion that occurred at the Calloway Cove Apartments, a Multifamily housing property in Jacksonville, FL, which resulted in a fire that injured several people.  HUD’s Real Estate Assessment Center had identified…

The U.S. Department of Housing and Urban Development (HUD), Office of Inspector General, has completed its audit of the HUD’s disaster preparedness from 2005 to 2018.  We performed this audit due to an agreement with six other Inspectors General as part of a Disaster Assistance Working Group-Cross Cutting Functional Effort by the Council of the Inspectors General on Integrity and Efficiency to determine to what extent the Federal…