Finding 2026-002: Compliance, Inadequate Compliance Monitoring, Regulatory Oversight, and Governance Housing Choice Voucher, 14.871 Material Weakness – Eligibility, Reporting and Special Tests and Provisions Repeat Finding 2025-004 Criteria: Management is responsible for establishing and maintaining effective internal controls over compliance that provide reasonable assurance the Housing Choice Voucher Program is administered in accordance with Federal statutes, regulations, and HUD requirements. Effective controls should include adequate monitoring of compliance requirements, timely implementation of regulatory changes, maintenance of current policies and procedures, and oversight sufficient to compensate for staffing limitations. HUD program requirements and regulatory changes should be reviewed and incorporated into the Authority's Administrative Plan in a timely manner. Similar control expectations are reflected in HCV compliance guidance addressing policy maintenance, Board oversight, monitoring of regulatory changes, and compensating controls where segregation of duties is limited. Condition: The Authority operates only the Housing Choice Voucher Program and employs a single individual responsible for substantially all program administration and compliance responsibilities. Because staffing levels do not permit traditional segregation of duties, the Authority should have established compensating monitoring and oversight controls. However, our audit identified significant weaknesses in the Authority's internal control structure over compliance. Specifically, we noted: • Compliance responsibilities were concentrated in one individual without independent review or documented monitoring procedures. • The Administrative Plan had not been updated to incorporate applicable HOTMA requirements. • Board minutes indicated the Authority was relying upon HUD Notices H-2025-03 and H-2025-07 when evaluating HOTMA implementation. These notices do not apply to the Housing Choice Voucher Program and the Authority was not utilizing the correct guidance in HUD PIH Notices. • The Authority had not established procedures to identify, evaluate, and implement applicable HUD PIH notices and other regulatory updates affecting the Voucher program. • Audit testing identified deficiencies in multiple compliance areas, indicating that compliance monitoring controls were not operating effectively. The existence of compliance deficiencies across multiple program areas demonstrates that the Authority's controls were not reasonably designed or operating effectively to ensure compliance with Federal program requirements. Similar conditions have been identified in other HCV compliance control assessments, including lack of monitoring of regulatory changes, inadequate Board oversight, and insufficient compensating controls where staffing is limited. Cause: The Authority has not established an effective system of internal control over compliance. Management and the Board of Commissioners did not implement sufficient compensating controls to address the risks associated with a single-employee operating structure. In addition, procedures were not established to ensure that changes in HUD regulations, notices, and program requirements were identified, evaluated, and incorporated into Authority policies and operational practices on a timely basis. Effect: The lack of effective compliance oversight increases the likelihood that material noncompliance with Federal program requirements could occur and not be prevented, detected, or corrected timely. Failure to maintain current policies and implement regulatory changes increases the risk of noncompliance in areas including tenant eligibility, rent calculations, utility allowances, inspections, reporting, and other program requirements. The deficiencies identified during the audit demonstrate that the Authority's control environment does not provide reasonable assurance of compliance with Housing Choice Voucher Program requirements. Recommendation: We recommend the Authority: 1. Establish formal procedures for monitoring compliance with Housing Choice Voucher Program requirements. 2. Update the Administrative Plan to incorporate all applicable HOTMA requirements and other current HUD guidance. 3. Develop a process for reviewing HUD PIH notices, regulatory updates, and other program guidance as issued. 4. Implement documented supervisory or independent compliance reviews to compensate for the lack of segregation of duties. 5. Provide periodic compliance reports to the Board of Commissioners and document Board oversight of corrective actions. 6. Establish written procedures to ensure significant regulatory changes are timely evaluated, adopted, and implemented. Views of Responsible Officials The Authority agrees with the finding.