Search

We audited the U.S.

HUD OIG is conducting the Fiscal Year (FY) 2022 evaluation of the HUD's information security program and practices, as required by the Federal Information Security Modernization Act (FISMA) of 2014.

We conducted this evaluation due to the growing homeless crisis and the U.S. Department of Housing and Urban Development’s (HUD) establishing a goal of ending homelessness.  Our objective was to evaluate the challenges that participating public housing agencies (PHA) face in meeting the goals and objectives of the HUD Veterans Affairs Supportive Housing (VASH) program.

Based on a complaint and a request from the U.S.

In accordance with the mandated work in FISMA, we are conducting the annual evaluation of information security practices, policies, and procedures established by HUD and the HUD Office of the Chief Information Officer. As part of the evaluation, we will also review 8 sample systems within 7 HUD program offices. Two products will result from our work; the mandated DHS CyberScope FISMA IG metrics report and a narrative report.

We will review HUD OCIO’s most recent IT modernization roadmap and strategy along with any other supporting documentation HUD can provide regarding modernization progress and milestones. Specifically, we will identify the various ongoing modernization projects within the roadmap and obtain documentation about the status of the individual projects.

To provide the HUD Secretary, senior leadership and Congress with an overview of the current status of Information Technology (IT) at HUD, the challenges they have overcome since the first 2018 IT Brief and the challenges they continue to face.

In accordance with the mandated work in FISMA, we are conducting the annual evaluation of information security practices, policies, and procedures established by HUD and the HUD Office of the Chief Information Officer. As part of the evaluation, we will also review 8 sample systems within 7 HUD program offices. Two products will result from our work; the mandated DHS CyberScope FISMA IG metrics report and a narrative report.