| FHFA Failed to Follow its Cloud-Based Computing Requirements when it Did Not Validate the Implementation of Minimum Security Requirements for Cloud-Based Tools and Did Not Include Required IT Security Provisions in Some of its Cloud Service Contracts |
AUD-2020-013 |
2020-09-17 |
| Weaknesses in FHFA’s Monitoring of the Enterprises’ 97% LTV Mortgage Programs May Hinder FHFA’s Ability to Timely Identify, Analyze, and Respond to Risks Related to Achieving the Programs’ Objectives |
AUD-2020-014 |
2020-09-29 |
| Summary of Administrative Inquiry: The Office of Inspector General’s Investigation into Whistleblower Reprisal Allegations Made by a Former Employee of a Contractor |
OIG-2020-006 |
2020-09-30 |
| Audit of the Federal Housing Finance Agency Office of the Inspector General’s Information Security Program (Fiscal Year 2020) |
AUD-2021-002 |
2020-10-20 |
| Audit of the Federal Housing Finance Agency’s Information Security Program (Fiscal Year 2020) |
AUD-2021-001 |
2020-10-20 |
| Compliance Review of FHFA’s Commitment to Conduct Independent Quality Control Reviews of DBR’s Community Investment Examinations |
COM-2021-001 |
2021-01-06 |
| After Four and a Half Years, DER Still Fails to Ensure that Enterprise Boards are Notified of Serious Deficiencies in a Timely Manner |
COM-2021-002 |
2021-01-21 |
| Compliance Review of FHFA’s Quality Control Reviews of Enterprise Supervision Activities |
COM-2021-003 |
2021-02-12 |
| Update on Mortgage Insurers as Enterprise Counterparties |
WPR-2021-001 |
2021-03-08 |
| Audit of FHFA’s Design of Procedures and Guidance to Prevent and Reduce Improper Payments |
AUD-2021-003 |
2021-03-11 |
| Compliance Review of DER's Assessments of Enterprise MRA Closure Packages |
COM-2021-004 |
2021-03-15 |
| Corporate Governance: Fannie Mae Senior Executive Officers and Ethics Officials Again Failed to Follow Requirements for Disclosure and Resolution of Conflicts of Interest, Prompting the Need for FHFA Direction |
EVL-2021-001 |
2021-03-15 |
| Update on Enterprise Transition from LIBOR to an Alternative Index for Single-Family ARMs |
WPR-2021-002 |
2021-03-17 |
| FHFA Followed OMB Guidance in Implementing its Enterprise Risk Management Program But its 2020 Risk Profile Failed to Identify a Significant Action Underway to Address Acknowledged Supervision Risk |
AUD-2021-004 |
2021-03-17 |
| For Nine Years, FHFA Has Failed to Take Timely and Decisive Supervisory Action to Bring Fannie Mae into Compliance with its Prudential Standard to Ensure Business Resiliency |
EVL-2021-002 |
2021-03-22 |
| Enterprise Business Resiliency: Risk Mitigation and Plan Development |
WPR-2021-003 |
2021-03-22 |
| FHFA’s Failure to Include the Financial Crimes and Model Components in its CSS Risk Assessment Is Inconsistent with a Risk-Based Approach to Supervision |
AUD-2021-005 |
2021-03-23 |
| Landscape Report: Survey of the Impact of the SolarWinds Orion Supply Chain Compromise on FHFA and its Regulated Entities |
OIG-2021-001 |
2021-03-23 |
| Disaster Risk for Enterprise Single-Family Mortgages |
WPR-2021-004 |
2021-03-23 |
| Audit of an FHFA Sensitive Employment-Related Case Tracking System: FHFA Followed its Access Control Standard, But its System Is Adversely Impacted by Two Security Control Weaknesses |
AUD-2021-006 |
2021-03-29 |
| Despite FHFA’s Acknowledgement that Enterprise Reliance on Third-Parties Represents a Significant Operational Risk, No Targeted Examinations of Fannie Mae’s Third-Party Risk Management Program Were Completed Over a Seven-Year Period |
AUD-2021-007 |
2021-03-29 |
| FHFA’s Failure to Define and Clearly Communicate “Supervisory Concerns” Hinders the Enterprise Boards’ Ability to Execute Their Oversight Obligations Under FHFA’s Corporate Governance Regulation and Renders the Regulation Ineffective as a Supervisory Tool |
EVL-2021-003 |
2021-03-30 |
| Compliance Review of DBR's Assessment and Documentation of Critical Cybersecurity Controls in Examinations of the FHLBank System |
COM-2021-005 |
2021-06-15 |
| Risk Assessment of FHFA’s Government Purchase Card and Travel Card Programs April 1, 2020 – March 31, 2021 |
OIG-RA-2021-001 |
2021-06-17 |
| FHFA Did Not Always Follow its Policies for Monetary Awards, Recruitment Bonuses, and Retention Allowances during Fiscal Years 2019 and 2020; FHFA’s Excellence Awards Were Not Included in Agency Policy |
AUD-2021-008 |
2021-06-17 |
