FEDERAL

No. Recommendation Report Status
AUD-2013-010-3
FHFA should direct Freddie Mac to
enforce controls for its counterparties
to deliver timely documents to
deficiency recovery vendors necessary
to calculate and pursue deficiencies,
and provide for financial consequences
for counterparties that fail to meet
delivery deadlines.
FHFA Can Improve Its
Oversight of Freddie
Mac’s Recoveries
from Borrowers Who
Possess the Ability to
Repay Deficiencies
Recommendation
agreed to by FHFA;
implementation of
recommendation
pending.
AUD-2013-010-4
FHFA should direct Freddie Mac to
implement a control to consider time
frames in state statutes of limitations
when prioritizing, coordinating, and
monitoring deficiency collection activity
for borrowers with the ability to repay.
FHFA Can Improve Its
Oversight of Freddie
Mac’s Recoveries
from Borrowers Who
Possess the Ability to
Repay Deficiencies
Recommendation
agreed to by FHFA;
implementation of
recommendation
pending.
AUD-2013-009-1
To strengthen its enterprise
information security and privacy
programs, FHFA should define and
issue enterprise information security
and privacy program requirements.
Action Needed to
Strengthen FHFA
Oversight of Enterprise
Information Security
and Privacy Programs
Recommendation
agreed to by FHFA;
implementation of
recommendation
pending.
AUD-2013-009-2
To strengthen its enterprise
information security and privacy
programs, FHFA should implement the
workforce plan and ensure the plan
of action addresses the need to have
an adequate number of information
technology examiners. Specifically,
FHFA should provide an appropriate
level of management oversight during
the annual supervisory examination
planning and execution processes
to ensure completion of the annual
plan and compliance with established
information technology examination
policies and procedures.
Action Needed to
Strengthen FHFA
Oversight of Enterprise
Information Security
and Privacy Programs
Recommendation
agreed to by FHFA;
implementation of
recommendation
pending.
AUD-2013-009-3
To strengthen its enterprise
information security and privacy
programs, FHFA should ensure
that planning for future information
technology examinations is based on
fully executed risk assessments, as
required by FHFA policy.
Action Needed to
Strengthen FHFA
Oversight of Enterprise
Information Security
and Privacy Programs
Recommendation
agreed to by FHFA;
implementation of
recommendation
pending.
Semiannual Report to the Congress • April 1, 2013–September 30, 2013 87