Audits and Evaluations

2019

FHFA’s Approval of Senior Executive Succession Planning at Fannie Mae Acted to Circumvent the Congressionally Mandated Cap on CEO Compensation (EVL-2019-001) -
FHFA’s Controls over Post-Employment Restrictions and Financial Disclosure Requirements for Offboarded Employees Were Followed During 2016 and 2017 (AUD-2019-005) -
FHFA’s Offboarding Controls over Access Cards, Sensitive IT Assets, and Records Were Not Always Documented or Followed During 2016 and 2017 (AUD-2019-004) -
External Penetration Test of FHFA's Network and Systems During 2018 (AUD-2019-003) -

2018

Performance Audit of the Federal Housing Finance Agency, Office of Inspector General’s Information Security Program Fiscal Year 2018 (AUD-2019-002) -
Performance Audit of the Federal Housing Finance Agency’s Information Security Program Fiscal Year 2018 (AUD-2019-001) -
Audit of FHFA’s Fiscal Year 2017 Government Travel Card Program: FHFA Needs to Emphasize Certain Program Requirements to Travelers and Approving Officials (AUD-2018-014) -
FHFA Needs to Strengthen Controls over its Employee Transportation Benefits Programs Audit Report (AUD-2018-013) -
Audit of FHFA’s Oversight of the Enterprises’ Affordable Housing Set-Asides and Allocations (AUD-2018-012) -
FHFA Should Re-evaluate and Revise Fraud Reporting by the Enterprises to Enhance its Utility (EVL-2018-004) -
Audit of FHFA’s Fiscal Year 2017 Government Purchase Card Program Found Several Deficiencies with Leased Holiday Decorations, and the Need for Greater Attention by Cardholders and Approving Officials to Program Requirements (AUD-2018-011) -
DBR’s Safety and Soundness Quality Control Reviews Were Conducted in Compliance with FHFA’s Standard During the 2017 Examination Cycle but DBR’s Community Investment Quality Control Reviews Were Not (AUD-2018-010) -
FHFA Complied with Applicable Improper Payment Requirements During Fiscal Year 2017 (AUD-2018-009) -
FHFA Failed to Ensure Freddie Mac’s Remedial Plans for a Cybersecurity MRA Addressed All Deficiencies; as Allowed by its Standard, FHFA Closed the MRA after Independently Determining the Enterprise Completed its Planned Remedial Actions (AUD-2018-008) -
As Allowed by its Standard, FHFA Closed Three Fannie Mae Cybersecurity MRAs after Independently Determining the Enterprise Completed its Planned Remedial Actions (AUD-2018-007) -
FHFA’s Adoption of Clear Guidance on the Review of the Enterprises’ Internal Audit Work When Assessing the Sufficiency of Remediation of Serious Deficiencies Would Assist FHFA Examiners (EVL-2018-003) -
FHFA Requires the Enterprises’ Internal Audit Functions to Validate Remediation of Serious Deficiencies but Provides No Guidance and Imposes No Preconditions on Examiners’ Use of that Validation Work (EVL-2018-002) -
FHFA Completed its Planned Procedures for a 2016 Representation and Warranty Framework Targeted Examination at Freddie Mac, but the Supporting Workpapers Did Not Sufficiently Document the Examination Work (AUD-2018-006) -
FHFA Completed its Planned Procedures for a 2015 Representation and Warranty Framework Targeted Examination at Fannie Mae, but Did Not Document a Change to Planned Testing (AUD-2018-005) -
Audit of FHFA’s Oversight of Freddie Mac’s Compliance with the Required Risk Mitigants of Automated Underwriting, Mortgage Insurance, and Homeownership Education for its Purchases of Mortgages with a 97% LTV (AUD-2018-004) -