HFA Should Develop and Implement a Risk-Based Plan to ...