CORRECTIVE ACTION PLAN August28, 2025 Cognizant oversight agency: U.S. Department of Housing and Urban Development The Housing Authority of the City of Decatur, Georgia respectfully submits the following corrective action plan for the year ended December 31 , 2024. Audit Firm: CohnReznick LLP 3560 L...
CORRECTIVE ACTION PLAN August28, 2025 Cognizant oversight agency: U.S. Department of Housing and Urban Development The Housing Authority of the City of Decatur, Georgia respectfully submits the following corrective action plan for the year ended December 31 , 2024. Audit Firm: CohnReznick LLP 3560 Lenox Road, Suite 2900 Atlanta, Georgia 30326 Audit period: for the year ended December 31, 2024 The finding from the December 31 , 2024 schedule of findings and questioned costs is discussed below. The finding is numbered consistently with the number assigned in the schedule. FINDING-FEDERAL AWARD PROGRAMS AUDIT DEPARTMENT OF HOUSING AND URBAN DEVELOPMENT 2024-001 Housing Voucher Cluster -AL Nos. 14.871 , 14.879 Recommendation: the Authority reviews its internal controls to reduce the risk of unauthorized access to and/or misuse of PII contained within the EIV reports in the future to ensure compliance with eligibility requirements. Action Taken: As part of the Authority's standard internal controls, all HCV employees with access to EIV are required to sign the Rules of Behavior and complete HUD's annual cybersecurity training. In addition, the Authority maintains physical security measures and general IT controls onsite to reduce risks associated with unauthorized access. Since the incident occurred, the Authority has implemented several additional measures to strengthen data protection practices. Specifically: •Issued a new Information Protection Policy and Confidentiality Agreement, which all employees are required to review and sign. ·Conducted an all-staff training session to review the new policy in detail and reinforce best practices for safeguarding participant information. •The Chief Executive Officer reiterated the Authority's commitment to data security and emphasized that any violation of information protection policies will result in disciplinary action, up to and including termination of employment, as well as potential legal prosecution. If the U.S. Department of Housing and Urban Development has questions regarding this plan, please call Larry H. Padilla, CEO at 404-270-2101. Larry H. Padilla CEO/Executive Director