We audited the Puerto Rico Department of Housing’s (PRDOH) fraud risk management practices to assess the maturity of its antifraud efforts. HUD heavily relies on its grantees to detect and prevent fraud, waste, and abuse and PRDOH is HUD’s second largest Community Development Block Grant Disaster Recovery and Mitigation (CDBG-DR and CDBG-MIT) grantee with over $20 billion in block grant funding. Our objective was to assess PRDOH’s fraud risk management practices for preventing, detecting, and responding to fraud when administering programs funded by HUD grants addressing the 2017 disasters.PRDOH’s fraud risk management processes to mitigate fraud risks either did not exist or were reactionary in nature. This resulted in the lowest desired maturity goal state -- Ad Hoc -- for organizations’ antifraud initiatives. PRDOH must improve its fraud risk management practices to adequately protect HUD funding provided for disaster recovery and mitigation efforts. Because PRDOH does not proactively manage fraud risk and its fraud risk management program is at the lowest state of maturity, it may have missed opportunities to strengthen controls and eliminate fraud vulnerabilities, leaving more than $20 billion in HUD disaster recovery and mitigation funds at increased risk of fraud. Implementing best practices and maturing PRDOH’s fraud risk management program will improve HUD and Puerto Rico’s ability to prevent and detect fraud and effectively utilize federal funds to support long-term disaster recovery and mitigation needs.We recommended that HUD instruct PRDOH to (1) implement a process to regularly conduct fraud risk assessments and determine a fraud risk profile, and (2) improve its fraud awareness initiatives.Further, we recommended that HUD (3) evaluate PRDOH’s risk exposure and tolerance as part of its program-specific fraud risk assessment for disaster grant programs; (4) coordinate with HUD’s Chief Risk Officer to provide training and technical assistance to PRDOH with a focus on the design, implementation, and performance of fraud risk assessments, and establish a fraud risk management framework for the organization; (5) assess whether grantees have mature fraud risk management programs within the disaster recovery and mitigation program; and (6) determine the fraud risk exposure in HUD's disaster recovery and mitigation programs, and work with grantees to implement appropriate fraud mitigation activities.
Report Date | Agency Reviewed / Investigated | Report Title | Type | Location | |
---|---|---|---|---|---|
Department of Housing and Urban Development | The Puerto Rico Department of Housing Should Enhance Its Fraud Risk Management Practices | Audit | Agency-Wide | View Report | |
U.S. Agency for International Development | Financial Audit of the National Foundation for the Development of Honduras, Cooperative Agreement AID-522-A-15-00002, January 1 to December 31, 2020 | Other |
|
View Report | |
U.S. Agency for International Development | Audit of the Statement of Inflows and Outflows of the Dollar Separate Account, Egypt's Sector Policy Reform Program, Implemented by Government of Egypt, Ministry of International Cooperation, Grant Agreement 263-K-644, July 1, 2020, to September 30, 2021 | Other |
|
View Report | |
U.S. Agency for International Development | Audit of the Schedule of Expenditures of Digital Serbia Initiative, Venture an Idea Project in Serbia, Cooperative Agreement 72016921FA00001, January 1 to December 31, 2022. | Other |
|
View Report | |
U.S. Agency for International Development | FY 2024 Joint Strategic Oversight Plan for Operation Atlantic Resolve, Including U.S. Government Activities Related to Ukraine | Other | Agency-Wide | View Report | |
Board of Governors of the Federal Reserve System | Open Recommendations Made to the Board of Governors of the Federal Reserve System | Other | Agency-Wide | View Report | |
Consumer Financial Protection Bureau | Open Recommendations Made to the Consumer Financial Protection Bureau | Other | Agency-Wide | View Report | |
Department of Defense | FY 2024 Joint Strategic Oversight Plan for Operation Atlantic Resolve, Including U.S. Government Activities Related to Ukraine | Other | Agency-Wide | View Report | |
Department of Veterans Affairs | Comprehensive Healthcare Inspection of the James E. Van Zandt VA Medical Center in Altoona, Pennsylvania | Review |
|
View Report | |
International Trade Commission | USITC Management and Performance Challenges | Top Management Challenges | Agency-Wide | View Report | |