We recommend that the Deputy Chief Financial Officer…In collaboration with all involved program offices, develop and implement a sampling methodology that allows for a sample size that reasonably allows for the testing of the complete payment cycle within the PIIA reporting timeframe.

Implement a procedure, which ensures that future improper and unknown payment testing that does not test the full payment cycle is reported in accordance with OMB’s guidance.

Coordinate with OMB to ensure that all of HUD’s data posted on OMB’s PaymentAccuracy.gov are accurate, including data before fiscal year 2021.

Update its procedures to include verifying all HUD data on PaymentAccuracy.gov immediately after the data are published on the public website to ensure that all data are accurate and if not, coordinate any corrections with OMB.

Develop and implement a plan that ensures the continuity of adequate internal controls over the PIH-TBRA program to detect and prevent improper payments, which can be implemented in a virtual environment. This plan should include how HUD can review tenant files or other information that validates tenant data remotely without compromising PII.

Collaborate with the Deputy Chief Financial Officer to work with grantees in identifying where improper and unknown payments could occur in the CPD-HIM program throughout the payment cycle, to include the risks associated with subgrantee billing, and document this analysis.

Collaborate with the Deputy Chief Financial Officer and use the analysis developed in 3A to ensure that HUD’s improper and unknown payment testing procedures are (1) designed to test the full payment cycle and (2) include the review of documentation that supports that final beneficiaries were eligible, goods and services were received, and payments went to the correct final beneficiaries and were for the correct amount.

Work with the Office of Community Planning and Development’s Chief Risk Officer and grantees to better identify the risks of improper and unknown payments throughout the payment cycle, to include the risks associated with grantees and subgrantees, and consider these risks when performing the CDBG and Homeless Assistance Grant risk assessments.

Work with the Deputy Chief Financial Officer to develop and design a process to ensure that each attribute evaluated during the PIIA risk assessment is evaluated at all levels of the full payment cycle.