Vulnerability Disclosure Policy

The Federal Housing Finance Agency Office of Inspector General (FHFA-OIG) is committed to ensuring the security of the American public by protecting their information. This Policy is intended to give security researchers clear guidelines for conducting vulnerability discovery activities and to convey our preferences in how to submit discovered vulnerabilities to us.

This policy describes what systems and types of research are covered under this policy, how to send vulnerability reports, and how long security researchers need to wait before publicly disclosing vulnerabilities.

FHFA-OIG encourages you to contact us to report potential vulnerabilities in our systems.

For more about this policy, please visit the Vulnerability Disclosure Policy page.

FHFA-OIG Digital Government Strategy

The U.S. Digital Government Strategy, launched on May 23, 2012, is aimed at building a 21st-century government that works better for the American people.

The Strategy has three main objectives:

  1. Enable the American people and an increasingly mobile workforce to access high-quality digital government information and services anywhere, anytime, on any device.
  2. Ensure that as the government adjusts to this new digital world, we seize the opportunity to procure and manage devices, applications, and data in smart, secure, and affordable ways.
  3. Unlock the power of government data to spur innovation across our nation and improve the quality of services for the American people.

The Strategy applies to all federal agencies and agencies are required to post a Digital Strategy page on their websites that reports on plans toward achieving the Strategy’s goals and the current status of the agency’s digital governance structure. Recognizing the importance of the goals in this Strategy, FHFA-OIG has included a number of them in its management of its IT infrastructure.

For more please visit the FHFA-OIG Digital Government Strategy page.

FHFA and FHFA-OIG Privacy Act Regulations

FHFA-OIG’s implementing regulations can be found at 12 CFR Part 1204. These regulations provide information on, among other things, how to make a request under the Privacy Act, how we will verify your identity, what FHFA-OIG will do when responding to your request, and some of the controls in place to prevent unauthorized access to FHFA-OIG records.

The Privacy Act of 1974, 5 U.S.C. § 552a, establishes a code of fair information practices that governs the collection, maintenance, use, and dissemination of personal information about individuals that is maintained in systems of records by federal agencies. A system of records is a group of any records under the control of an agency from which information is retrieved by the name of the individual or by some identifying particular assigned to the individual. The Act balances the government’s need to maintain information about individuals with the right of individuals to be protected against unwarranted invasions of their privacy by the Federal government.

For more please visit the FHFA-OIG Privacy Program page.

Information Quality 

Requests seeking correction of information disseminated by FHFA-OIG should be sent to:

Federal Housing Finance Agency – Office of Inspector General
Chief Information Officer
Information Quality Program
400 7th Street, S.W.
Washington, D.C. 20219

Or to:

For more please visit the Information Quality page.

FHFA-OIG Body Worn Cameras Policy

Body Worn Cameras Policy

Annual No-Knock Report

2024 Annual No-Knock Report