HUD’s mission to create strong, sustainable, and inclusive communities and quality and affordable homes for all has significantly evolved due to the current economic and housing crisis. Accordingly, the department has increased its reliance on IT. In particular, legislation enacted over the past several years has given the department new responsibilities for, among other things, strengthening the housing market. For example, the Housing and Economic Recovery Act of 2008 established a program intended to help families avoid home foreclosure by refinancing them into mortgages insured by FHA. As a result, the number of mortgage loans insured by FHA more than tripled between 2006 and 2010, from almost half a million loans to 1.7 million loans. This in turn resulted in the need for much greater system processing capabilities to accommodate the increased demand. IT plays a critical role in the department’s ability to carry out its growing mission by supporting data collection and dissemination throughout the department and to external parties. For instance, the department reports that its business areas rely on IT to process over 50,000 loan requests per week, over 12,000 service calls per month, and more than 7,000 grant requests annually for each of its major grant programs. Despite its growing mission, HUD’s IT environment has not effectively supported its business operations. In 2009, we reported that the department’s IT had consisted of: over 200 information systems, many of which performed the same manual processing for key business processes; and functions and, thus, were duplicative; stove-piped, nonintegrated systems that could not share related data; systems that were nearly 15 years old (on average), including several different operating systems and using 35 different programming languages. A factor that had contributed to the state of HUD’s IT environment was the department’s focus, primarily, on the maintenance of its existing systems and infrastructure, rather than on the modernization needed to meet its expanding mission needs. For example, in fiscal year 2008, about 2 percent of the department’s IT obligations were for new development, whereas the remaining 98 percent were obligated for operating and maintaining legacy systems. HUD’s Office of the Chief Information Officer (OCIO) is responsible for supporting the department’s programs, services, and management processes by providing IT solutions and services. Additionally, the OCIO is responsible for developing, modernizing, and enhancing the IT environment. To this end, in 2010, the OCIO established four management goals, which aligned with the department’s 2010-2015 Strategic Plan: (1) enhance the quality, availability, and delivery of HUD information to citizens, business partners, and government; (2) promote an enterprise approach to IT that will foster innovation and collaboration; (3) achieve excellence in IT management practice; and (4) transform the OCIO to a culture of operational excellence that can achieve current and future departmental goals. To assist HUD in its modernization efforts, Congress has authorized and appropriated funding for the department in multiple statutes. For example, in recognizing the need to modernize the department’s IT environment, the Housing and Economic Recovery Act of 2008 authorized $25 million for each fiscal year, from 2009 through 2013, for improvements to FHA’s IT, among other things. In addition, according to department officials, HUD used approximately $1.5 million of the funding provided in the American Recovery and Reinvestment Act of 2009 for improving IT capabilities across a range of programs. More recently, the appropriations acts for fiscal years 2010 and 2011 made available to HUD for expenditure $180 million and $71 million, respectively, for IT modernization to support its Transformation Initiative. While HUD has been working to modernize its IT systems, we reported in 2009 that the department lacked sound management controls that are essential to achieving successful outcomes. These controls included IT strategic planning, investment management, enterprise architecture, and human capital planning. We recommended that the department make improvements in these areas, and while it has taken a number of important steps, additional actions are still needed by the department to respond to remaining concerns. Strategic planning and performance management: Effective IT strategic planning and performance management are intended to ensure that an organization’s IT strategic goals are aligned with its overall mission goals and outcomes and that these goals are supported by clearly defined (1) activities aimed at accomplishing the goals and (2) measures for determining performance in accomplishing the activities and goals. In 2009, we found that although HUD had established an IT strategic plan that outlined goals and performance measures, it had not assessed its IT performance against established goals since fiscal year 2007. By not regularly assessing and reporting progress against its strategic IT performance measures and activities, HUD did not know how well it was achieving its strategic goals and where it needed to improve. We recommended that HUD establish a plan for developing and implementing the department’s performance management framework, including an implementation schedule of key activities and related resource needs, and ensure that this plan provides for annually reporting progress in achieving IT strategic goals. In September 2011, we reported that HUD had fully implemented this recommendation by issuing a new department-wide strategic plan with associated goals that aligned with new IT strategic goals that the OCIO developed. IT investment management: Investment management is aimed at selecting, controlling, and evaluating IT investments in a manner that better ensures that they produce business value, reduce investment- related risks, and increase accountability and transparency in the investment decision-making process. As we have previously reported, moving away from project-centric investment management and toward a portfolio-based approach, is considered a best practice. By managing investments as a portfolio, an organization can consider new investment proposals, along with previously funded investments, and identify the appropriate mix and synergies of these investments to best meet mission needs, technology needs, and priorities for improvement. In 2009, we reported that while HUD had established a range of policies and procedures for developing a complete investment portfolio, it had not established policies and procedures for evaluating the portfolio.evaluating the performance of its portfolios, HUD was limited in its ability to control the risks and achieve the benefits associated with the mix of legacy system and modernization investments selected. Accordingly, we recommended that HUD develop a plan for instituting policies and procedures for reviewing, evaluating, and improving the performance of the department’s portfolio of investments; developing criteria for assessing portfolio performance and reviewing and Without having defined and implemented practices for modifying them at regular intervals; defining and collecting IT portfolio performance measurement data consistent with the portfolio performance criteria; and executing adjustments to the IT investment portfolio in reaction to actual portfolio performance. In September 2011, we reported that, in response to our recommendations, the department had begun establishing a new investment management governance structure and had applied it to its portfolio for IT modernization projects. However, HUD had not yet developed criteria for assessing portfolio performance, or defined and collected data consistent with the criteria. In the absence of taking these key steps, the department has continued to be challenged in implementing proper investment management practices. Human capital: As we have previously reported, IT human capital management is intended to ensure that an organization has the employees with the appropriate knowledge and skills to effectively execute critical IT functions. Human capital management involves assessing IT workforce needs, inventorying existing staff’s knowledge and skills and identifying any gaps between needs and existing capabilities, and developing strategies and plans to fill any gaps. In 2009, we reported that HUD’s OCIO had not adequately performed most of these activities. For example, while the office had analyzed skill gaps in its IT workforce and had developed a strategy for closing those skills gaps, OCIO officials did not know when implementation of this strategy would begin or be completed. Additionally, the gap analysis was based on an incomplete and outdated inventory of human capital skill levels, thus rendering its strategy unreliable. We noted that without effective human capital management, HUD’s ability to have the right people to effectively operate and maintain existing systems was impaired. Therefore, we recommended that HUD establish and execute IT human capital gap closure strategies that are based on a complete and current inventory of its existing IT workforce skills. In September 2011, we reported that HUD had made progress in this area. Specifically, HUD began working to establish a human capital plan that included tasks such as identifying challenges, developing performance metrics and strategies, and addressing the identified IT skill gaps. HUD anticipated finalizing this plan by December 2011; however, as of this month, the plan has not yet been completed. Until HUD finalizes its IT human capital management plan, implementation of this management control will continue to be a challenge. Enterprise architecture: EA development and use is aimed at establishing a corporate blueprint for investing that connects strategic plans with individual programs and system solutions. As such, this blueprint provides the information needed to guide and constrain investments in a consistent, coordinated, and integrated fashion— thereby improving interoperability, reducing duplicative efforts, and optimizing mission operations. Developing an enterprise architecture with associated system solutions for portions, or segments (referred to as segment architectures), is an important aspect of this activity. In 2009 we reported that, while HUD had established an enterprise architecture program that met key aspects of related best practices, its efforts to develop segment architectures were not sufficient. For example, HUD had identified and prioritized segments to be modernized; however, it did not adhere to these priorities, the segments developed did not reflect important elements of federal guidance, and most were out of date. We found that HUD had developed eight segment architectures; however, these segments were not the department’s eight highest priorities. As a result, HUD’s segment architectures did not provide a sufficient basis for guiding and directing segment projects in a manner to ensure that both, system enhancements and new development efforts were properly sequenced, well integrated, and not duplicative. We recommended that HUD develop a plan for reexamining segment priorities and updating and developing segment architectures in accordance with these priorities and relevant guidance.