| FHFA’s Security Controls Were Not Effective to Protect Its Network and Systems Against Internal Threats |
AUD-2024-007 |
2024-08-12 |
| Audit of the Federal Housing Finance Agency’s Information Security Programs and Practices Fiscal Year 2024 |
AUD-2024-006 |
2024-07-30 |
| The Fair Lending Examination Program Was Implemented in Accordance with Policies and Procedures, But Guidance Needs Improvement |
AUD-2024-005 |
2024-05-08 |
| DBR Conducted Effective Oversight of the FHLBanks’ Management of Third-Party Provider Risks But Did Not Fully Document Sampling in Examination Workpapers |
AUD-2024-004 |
2024-03-28 |
| DER Provided Effective Oversight of the Enterprises’ Nonbank Seller/Servicers Risk Management But Needs to Develop Policies and Procedures for Two Supervisory Activities |
AUD-2024-003 |
2024-03-28 |
| DER Effectively Followed Its Risk-Based Approach in Its Oversight of Fannie Mae’s IT Investment Management |
AUD-2024-002 |
2023-11-07 |
| FHFA Did Not Document Reviews of Desktop Appraisal Reports |
AUD-2024-001 |
2023-10-25 |
| DBR Conducted Effective Oversight of FHLBanks’ Employee Expense Reimbursement Processes But Lacked Documented Examination Guidance |
AUD-2023-009 |
2023-09-28 |
| FHFA Effectively Blocked Phishing Emails, But Requires Improvement in Managing Vulnerabilities on Its Public Websites |
AUD-2023-008 |
2023-09-27 |
| DER Implemented Controls to Ensure that the Enterprises and CSS Remediated Adverse Examination Findings Within FHFA Determined Reasonable Timeframes |
AUD-2023-007 |
2023-09-06 |
| Audit of the Federal Housing Finance Agency’s Privacy Program Fiscal Year 2023 |
AUD-2023-006 |
2023-08-23 |
| FHFA Has Initiatives to Advance Equity and Support for Underserved Communities, but Tracking and Documentation Need Improvement |
AUD-2023-005 |
2023-07-26 |
| Audit of the Federal Housing Finance Agency’s Information Security Programs and Practices Fiscal Year 2023 Audit |
AUD-2023-004 |
2023-07-26 |
| FHFA Followed Its Guidance When Making Conservatorship Decisions But Needs to Improve Retention of Decision Documentation and Update the Conservatorship Decision Policy and Procedures |
AUD-2023-003 |
2023-03-29 |
| FHFA Did Not Fully Implement Select Security Controls Over One of Its Cloud Systems as Required by NIST and FHFA Standards and Guidelines |
AUD-2023-002 |
2023-03-08 |
| The Division of Federal Home Loan Bank Regulation Followed Its Guidance in Performing Annual Examinations of Each Federal Home Loan Bank’s Affordable Housing Program but the AHP Examination Planning Processes Require Improvement |
AUD-2023-001 |
2023-02-09 |
| FHFA Did Not Always Follow Federal Regulations and Its Policy for Employee Financial Disclosures During Fiscal Years 2020 and 2021 |
AUD-2022-011 |
2022-09-08 |
| FHFA Did Not Fully Comply with DHS Binding Operational Directives for Securing Its Public Websites and Publishing Its Vulnerability Disclosure Policy |
AUD-2022-010 |
2022-08-31 |
| Audit of the Federal Housing Finance Agency’s Information Security Program and Practices Fiscal Year 2022 |
AUD-2022-009 |
2022-07-28 |
| FHFA Has Laid the Groundwork to Integrate Consideration of Climate-Related Financial Risk into its Policies and Programs but Plans and Methodologies to Accomplish This Work Are in the Early Stages of Development |
AUD-2022-008 |
2022-06-23 |
| FHFA Did Not Always Follow its Procedures When Reviewing the Enterprises' Draft SEC Filings, But Plans to Take Corrective Action |
AUD-2022-007 |
2022-05-12 |
| FHFA Adequately Designed and Implemented Controls to Detect and Prevent Improper Vendor Payments During Fiscal Year 2021 |
AUD-2022-006 |
2022-03-30 |
| DER Followed its Guidance to Prepare, Review, and Issue the 2020 CSS Report of Examination |
AUD-2022-005 |
2022-03-23 |
| FHFA’s Ability to Fill Positions Was Hampered by an Unreliable Internal Management Reporting Tool, Failure to Review its Hiring Practices, and Lack of Training |
AUD-2022-004 |
2022-01-05 |
| FHFA Did Not Follow All of its Contingency Planning Requirements for the National Mortgage Database (NMDB) or its Correspondence Tracking System (CTS) |
AUD-2022-003 |
2021-12-13 |