Compliance Reviews and Inspections

2024

FHFA’s Office of the Ombudsman Did Not Meet Two Deadlines When Processing Incoming Submissions (COM-2025-001) -
Inspection: FHFA's Adherence to Cyber Incident Reporting Procedures (COM-2024-009) -
DER Satisfied Procedural Requirements When Planning Its Supervision of CSS for the 2023 Examination Cycle (COM-2024-007) -
Inspection: FHFA’s Inclusion of a Mandatory Anti-Gag Provision in Its Non-Disclosure Materials During the Review Period (COM-2024-008) -
DBR Performed Quality Control Reviews of All Substantive Workpapers Prepared by Examiners-in-Charge During the Review Period (COM-2024-006) -
Inspection: FHFA’s Oversight of Enterprise Fraud Risk Management (COM-2024-005) -
FHFA Regularly Analyzed Agency Workforce Data and Assessed Trends in Hiring, Awards, And Promotions (COM-2024-004) -
FHFA Incorporated the FAR’s Whistleblower Protection Language for Contractor Employees in Selected Open Market Solicitations and Awards (COM-2024-003) -
FHFA Has Acted to Strengthen Its Oversight of Federal Home Loan Bank Members’ Compliance with Community Support Requirements (Inspection) (COM-2024-001) -
FHFA Completed All Planned Ongoing Monitoring Activities for Fannie Mae and CSS During the 2022 Examination Cycle (COM-2024-002) -

2023

FHFA Performed Active Oversight and Made Efforts to Ensure Fannie Mae’s Compliance with Its Directions to Improve Audit Committee Operations (COM-2023-007) -
FHFA Did Not Effectively Implement Records Management Training Controls for Onboarding and Offboarding Personnel (COM-2023-006) -
FHFA Did Not Effectively Implement Controls Intended to Ensure the Integrity of Its Employee Transportation Benefits Program (COM-2023-005) -
DBR Adhered to Its Work Program Minimum Frequency Guidelines for Annual Examinations (COM-2023-004) -
FHFA Secured Electronic Media It Designated for Disposal, But Did Not Inventory Items Consistently or Reconcile Inventory Discrepancies (COM-2023-003) -
FHFA Adhered to Its Corrective Actions for Hiring Pathways Interns (COM-2023-002) -
The Company That Issues and Administers the Enterprises’ Mortgage-Backed Securities Adhered to FHFA’s Cybersecurity Incident Reporting Standards (COM-2023-001) -

2022

FHFA Is Addressing Inadequate Cybersecurity Incident Reports by the Enterprises (COM-2022-009) -
FHFA Has Not Consistently Collected and Destroyed Identification Cards from Separating Personnel, but Has Otherwise Substantially Adhered to its Offboarding Procedures (COM-2022-008) -
FHFA’s Division of Enterprise Regulation Substantially Adhered to its Rotation Policy for Examination Leader Assignments Despite Not Tracking Them Consistently (COM-2022-007) -