Audits and Evaluations

2022

FHFA Did Not Always Follow Federal Regulations and Its Policy for Employee Financial Disclosures During Fiscal Years 2020 and 2021 (AUD-2022-011) -
FHFA Did Not Fully Comply with DHS Binding Operational Directives for Securing Its Public Websites and Publishing Its Vulnerability Disclosure Policy (AUD-2022-010) -
Audit of the Federal Housing Finance Agency’s Information Security Program and Practices Fiscal Year 2022 (AUD-2022-009) -
FHFA Has Laid the Groundwork to Integrate Consideration of Climate-Related Financial Risk into its Policies and Programs but Plans and Methodologies to Accomplish This Work Are in the Early Stages of Development (AUD-2022-008) -
FHFA Did Not Always Follow its Procedures When Reviewing the Enterprises' Draft SEC Filings, But Plans to Take Corrective Action (AUD-2022-007) -
FHFA Adequately Designed and Implemented Controls to Detect and Prevent Improper Vendor Payments During Fiscal Year 2021 (AUD-2022-006) -
DER Followed its Guidance to Prepare, Review, and Issue the 2020 CSS Report of Examination (AUD-2022-005) -
FHFA’s Public Reporting of the Enterprises’ Progress Toward the Objectives FHFA Set in the 2020 Conservatorship Scorecard Lacked the Detail and Transparency of Past Reporting (EVL-2022-002) -
FHFA’s Division of Enterprise Regulation Has Made Progress in Its Quality Control Program but Needs to Ensure Adequate Reporting and Feedback Is Provided to Management (EVL-2022-001) -
FHFA’s Ability to Fill Positions Was Hampered by an Unreliable Internal Management Reporting Tool, Failure to Review its Hiring Practices, and Lack of Training (AUD-2022-004) -

2021

FHFA Did Not Follow All of its Contingency Planning Requirements for the National Mortgage Database (NMDB) or its Correspondence Tracking System (CTS) (AUD-2022-003) -
Audit of the Federal Housing Finance Agency Office of Inspector General's Information Security Program, Fiscal Year 2021 (AUD-2022-002) -
Audit of the Federal Housing Finance Agency's Information Security Program, Fiscal Year 2021 (AUD-2022-001) -
FHFA Did Not Follow its Interim Directive on a Requirement to Use a FAR Clause Intended to Protect Whistleblower Rights of Contractor Employees, But Has Since Taken Corrective Action (AUD-2021-015) -
FHFA’s Division of Enterprise Regulation Did Not Follow or Train to its Procedures for Information Sharing of Enterprise Counterparty Performance Issues (AUD-2021-014) -
FHFA’s Use of its Enterprise Examination Manual, in Practice, Does Not Align with its Goal of Promoting a Consistent Examination Approach or Meet Management’s Expectations (AUD-2021-013) -
DBR Generally Followed its Guidance to Assess the Remediation of Adverse Examination Findings Issued to the FHLBanks and the Office of Finance (AUD-2021-012) -
Audit of the Federal Housing Finance Agency’s 2021 Privacy Program (AUD-2021-011) -
FHFA Lacked Documentation of its Validation of Data Used to Produce the Third Quarter 2020 Seasonally Adjusted, Expanded-Data FHFA HPI and Failed to Timely Review its Information Quality Guidelines (AUD-2021-010) -
FHFA Did Not Record, Track, or Report All Security Incidents to US-CERT; 38% of Sampled FHFA Users Did Not Report a Suspicious Phone Call Made to Test User Awareness of its Rules of Behavior (AUD-2021-009) -