The Federal Information Security Modernization Act of 2014 (FISMA) directs Inspectors General to conduct an annual evaluation of the agency information security program.  FISMA, Department of Homeland Security (DHS), Office of Management and Budget (OMB) and National Institute of Standards and Technology (NIST) establish information technology (IT) security guidance and standards for Federal agencies.

We audited the U.S. Department of Housing and Urban Development’s (HUD) use of funds for building improvements, managed by its Office of Administration, in response to a request from the U.S. House and Senate Committees on Appropriations Subcommittee on Transportation, Housing and Urban Development, and Related Agencies.  HUD planned to use repurposed and transferred funds from fiscal years 2015 and 2016, totaling $18.3 million, for Office of Administration projects that included building improvements at its headquarters, the Robert C.