Structure the internal audit division within a framework that can ensure its organizational independence and allow the internal audit activity to fulfill its responsibilities.

Continue to fill its vacancies with qualified and trained staff, thus ensuring that staffing levels remain adequate to administer the 2017 and 2008 CDBG-DR grant funds.

Establish procurement policies and procedures for the 2008 CDBG-DR grant to ensure compliance with 2 CFR 200.318-326, including but not limited to procedures to ensure full and open competition, supporting independent cost estimates, properly documenting the procurement history, and including required clauses in contracts, among other issues.

Ensure that the 2017 CDBG-DR procurement policy addresses the establishment of a contract register that, at a minimum, contains the procurement information specified in section 3.8 of HUD’s Buying Right Guide regarding the PRDOH’s acquisitions of goods and services, as well as of its subrecipients and partners.

Review and update its procurement policy for the 2017 CDBG-DR grant to address weaknesses identified, including but not limited to required contract clauses, processes for soliciting and accepting noncompetitive proposals, and performing cost or price analyses before receiving bids or quotations, among other issues.

Complete, within 30 days of the issuance of this audit report, the review for preventing duplication of benefits associated with its 2008 CDBG-DR grant and pursue appropriate remedies for any instances of noncompliance found.

Negotiate with Puerto Rico’s Insurance Commissioner and with other CDBG-DR grantees, within 30 days of the issuance of this audit report, to establish data-sharing agreements for the 2017 CDBG-DR grant disaster, any open disaster recovery grants, and future disasters.

Negotiate with the SBA, within 30 days of the issuance of this audit report, to extend its data-sharing agreements for the term of the expenditure requirements set forth in public laws or the Federal Register in relation to the 2017 and 2008 disasters.

Review and update its 2017 CDBG-DR policies and procedures to prevent duplication of benefits and ensure that these are comprehensive and all applicable activities are included, including but not limited to the Small Business Financing Program and the Construction and Commercial Revolving Loan program.

Develop and implement a financial management system for its 2008 CDBG-DR grant and ensure that it tracks program funds to a level that supports compliance with HUD requirements. At a minimum, the accounting system must reflect disbursements by grant, activity, and activity type and properly account for assets, liabilities, and program income.