U.S. flag

An official website of the United States government Here’s how you know

The .gov means it’s official.

Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.

The site is secure.

The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Evaluation of HUD's Security Assessment and Authorization (SA&A) Program

HUD OIG is evaluating HUD's security assessment and authorization (SA&A) program within the Office of the Chief Information Officer (OCIO). The SA&A program is essential for ensuring systems meet security requirements and mitigate cybersecurity risks. Our evaluation objective is to assess the effectiveness of the SA&A program, including the causes for expired information system authorizations to operate (ATO) and the state of their remediation.

The HUDUSER System Had Exploitable IT Security Weaknesses

The U.S. Department of Housing and Urban Development (HUD) Office of Inspector General (OIG) conducted an evaluation of the operational effectiveness of information technology (IT) security controls for the HUDUSER system, which is operated by HUD’s Office of Policy Development and Research (PD&R).  The OIG identified four significant weaknesses involving website security, underscoring the need to strengthen technical security controls.  To address these findings, we provide eight new recommendations, which will be formally tracked by our office.

HUD’s Office of Single Family Housing’s Efforts to Increase the Supply of Affordable Housing Had Minimal Effect

We audited the U.S. Department of Housing and Urban Development’s (HUD) Office of Single Family Housing’s efforts to increase the supply of affordable housing.  Our audit objective was to determine whether HUD met its intended outcome to increase the supply of affordable housing to owner-occupants, governmental entities, and HUD-approved non-profits by expanding the exclusive listing periods for its Real Estate Owned (REO) properties and Claims Without Conveyance of Title (CWCOT) program.

Audit of FHA’s Fiscal Year 2025 Financial Statements

We contracted with the independent public accounting firm of Sikich CPA LLC to audit the financial statements of FHA as of and for the fiscal year ending September 30, 2025, and to provide reports on FHA’s (1) internal control over financial reporting and (2) compliance with laws, regulations, contracts, and grant agreements and other matters.  Our contract with Sikich required that the audit be performed in accordance with U.S. generally accepted government auditing standards, Office of Management and Budget audit requirements, and the Financial Audit Manual of the U.S.

Audit of HUD’s Compliance with Payment Integrity Information Act (PIIA) for fiscal year 2025

HUD OIG is auditing HUD's compliance with the Payment Integrity Information Act of 2019 (PIIA) for fiscal year 2025. PIIA helps agencies identify improper payments, which could impact HUD’s beneficiaries and ultimately undermines the integrity of HUD’s programs, which hinders HUD in fully achieving its mission. Our objectives are to assess (1) whether HUD has met all requirements of PIIA for fiscal year 2025 and OMB Circular A-123 Appendix C (M-21-19), and (2) HUD’s efforts to prevent and reduce improper and unknown payments.