Risk Management Guide
FFP operates in emergency, unstable, and otherwise non-traditional environments that USDA has not historically administered. Risk assessment, third-party monitoring, program evaluation, and implementing-partner personnel safety all require methodologies adapted to environments where standard pre-engagement diligence is unavailable.
Why It Matters
The Risk Management Guide is the operational core of the FFP transition. Without it, USDA assumes the risk surface of emergency programming without the tools to manage it.
Statutory & Regulatory Authority
The legal/regulatory instruments that bound this deliverable. HSG analysts cite these in every Section 4.1 deliverable submission.
7 USC § 1721 et seq.
P.L. 480 authorizing statute — base authority for emergency operations and risk management.
22 CFR Part 226 (transitioning)
Grant compliance and risk-management provisions in legacy USAID framework.
OMB Circular A-123
Internal controls over federal programs — baseline for USDA-grade risk-management posture.
GAO-17-224 (March 2017)
International Food Assistance: USAID Has Controls for Implementation — the audit-readiness baseline USDA inherits and carries forward.
22 USC § 2151n
Limitations on assistance to countries with human rights violations — input to risk-tiering.
Operating Context
Anchored on the FY25 NOFO Reform 2 (strict accountability against fraud / waste / abuse / diversion) (Design Goal 2). Risk management is the operational core of the FFP transition. USDA assumes the risk surface of emergency programming in non-traditional environments — countries where standard pre-engagement diligence is unavailable, where implementing-partner personnel safety is concrete, and where program-outcome evaluation runs on different methodology than stable-context programming. The House Country-Tier Risk Framework — HSG's proprietary four-tier classification (Stable / Constrained / Insecure / Hostile) anchored on triple-source Government designations (State Travel Advisory + DoD threat classification + Treasury OFAC sanctions status) — supplies the analytical infrastructure. USAID FFP Office Monitoring, Evaluation & Reporting Policy & Guidance V2.0 is the M&E baseline USDA inherits; Diana L. Caley co-authored the predecessor BHA M&E Technical Guidance that V2.0 descends from and authored the Emergency Indicator Handbook risk-assessment chapter. GAO-17-224 is the audit-readiness baseline — its findings must be carried forward or closed under USDA tenure. Maurice House's execution of the first U.S. wheat export to Taliban-led Afghanistan (Islamabad post, 1996–98) is the canonical Tier 4 (Hostile) case of Title II programming in precisely the operating environment PWS 3.3 describes. Per Amendment 1 Q96, the Guide is calibrated to USDA's stated expectation that contractor personnel will not handle Controlled Unclassified Information.
Inherited State — Quantitative Baseline
Real public-record figures HSG uses as the starting baseline for this deliverable. Every entry is sourced and dated.
| Baseline metric | Value | Source | As of |
|---|---|---|---|
| GAO-17-224 title | International Food Assistance: USAID Has Controls for Implementation, but Should Strengthen Monitoring (March 2017) | GAO Report GAO-17-224; gao.gov | Mar 2017 |
| GAO-17-224 recommendations (as published) | 5 recommendations to USAID Administrator | GAO-17-224 Recommendations section | Mar 2017 |
| USAID FFP M&E V2.0 pillar count | 9 pillars (Strategic Frameworks → Data Quality Assessments) | USAID FFP Office Monitoring, Evaluation & Reporting Policy & Guidance V2.0 | V2.0 publication |
| State Department Travel Advisory levels | 4 levels (1=normal precautions → 4=do not travel) | State Department Bureau of Consular Affairs travel.state.gov | Current |
| OFAC sanctions programs (active) | 38 sanctions programs covering 30+ jurisdictions | Treasury OFAC sanctions programs list | Current |
| OFAC Specially Designated Nationals (SDN) list size | Approximately 12,000+ designations | Treasury OFAC SDN list (downloadable feed) | Current |
| Houthi FTO designation status | Re-designated FTO (Jan 2025; EO 14175) | Executive Order 14175; State Department FTO list | Jan 2025 |
| Title II countries operating at State Adv. Level 4 (FY 2024) | Approximately 6–8 (Sudan, S Sudan, Yemen, Somalia, Burkina Faso, Mali, Afghanistan, parts of DRC) | USAID/BHA FY24 program country-list × State Travel Advisory matrix | FY 2024 |
| USAID/BHA TPM contractor market | 6–8 primary providers (IBTCI, iMMAP, Forcier, Mercy Corps RMU, Acacia, CSI) | USAID/BHA award history; FAQR cycle reports | FY24 baseline |
| OMB Circular A-123 (internal controls) revision | OMB M-16-17 (July 2016) — current operative | OMB Memorandum M-16-17 Management's Responsibility for Enterprise Risk Management and Internal Control | Jul 2016 |
| USAID OIG advisory on 2025 USAID dissolution | Approximately $489 million of food assistance at ports, in transit, and in warehouses at risk of spoilage; over 90% of BHA workforce furloughed or placed on administrative leave | USAID OIG: "Oversight of USAID-Funded Humanitarian Assistance Programming Impacted by Staffing Reductions and Pause on Foreign Assistance," Feb 10, 2025 | Feb 10, 2025 |
| YMELP II — primary BHA TPM contract horizon (Yemen) | International Business & Technical Consultants Inc. (IBTCI); April 2024 – April 2029 (5-yr contract) | IBTCI YMELP II announcement; USAID/BHA Yemen Monitoring, Evaluation and Learning Program II | April 2024 – April 2029 |
| iMMAP IMRC — BHA information-management TPM | iMMAP Inc. Information Management Resource Center (IMRC) under BHA — Syria + multi-country | iMMAP / BHA setting-the-benchmark publication | Active through transition |
| USAID Counter-Terrorism Vetting Unit (CTU) status | OIG-flagged compromised — CTU told not to report to work early 2025; partner vetting at near-zero | USAID OIG Feb 10, 2025 advisory | Early 2025 |
| Counter-terrorism vetting USDA capability | No USDA equivalent of USAID CTU — must be built | USDA organizational structure analysis (no USDA-internal partner-vetting analog) | Current |
| BHA-era surge response capacity (DARTs) | Disaster Assistance Response Teams — terminated at BHA scale; State PRM retains skeleton | CSIS 2025 humanitarian-capability retrospective | Post-dissolution |
Inherited Document Inventory
The specific documents USDA inherits from USAID/BHA on this scope. Each must be re-issued, modified, or sunset under USDA authority.
Audit-Readiness Baseline (carry-forward findings)
GAO-17-224 is the operative audit-readiness baseline USDA inherits. Findings carry forward into USDA tenure unless explicitly closed.
GAO-17-224International Food Assistance: USAID Has Controls for Implementation, but Should Strengthen Monitoring (Mar 2017)
Audit baseline USDA inherits and carries forward. 5 published recommendations; carry-forward closure status per recommendation must be inventoried and re-baselined under USDA OIG.
OMB M-16-17Management's Responsibility for Enterprise Risk Management and Internal Control
Federal-wide internal-controls framework binding USDA-grade risk management on FFP. Current operative version of OMB Circular A-123.
OMB Circular A-11 § 185Statistical-model validation guidance
Applies to Enhanced Bellmon Framework Tier 1–3 model validation (statistical-model component); reproducibility and audit-defensibility baseline.
5 USC App. § 5Inspector General Act of 1978 (as amended)
USDA OIG audit authority over FFP — replaces USAID OIG; carry-forward audit coordination required at transition.
USAID FFP M&E Policy & Guidance V2.0 — 9 Pillars
The M&E methodology baseline USDA inherits. Each pillar must be evaluated for inheritance / modification / re-issuance under USDA authority.
Pillar 1Strategic Frameworks
Country / program-level strategic-framework methodology — country-selection-decision linkage.
Pillar 2Logical Frameworks
Activity / DFSA / RFSA logical-framework methodology — Phase-1 R&I design dependency.
Pillar 3Indicators
Standard FFP indicator definitions — directly inherited by USDA reporting.
Pillar 4Baseline / Endline / Mid-term Evaluations
Evaluation methodology for DFSAs / RFSAs; R&I Phase-1 baseline study is the validation instrument.
Pillar 5Recurrent Monitoring Studies (RMS)
Annual M&E methodology — direct dependency for performance reporting.
Pillar 6FFP Annual Results Report
Statutory annual-reporting product (7 USC § 1736a) methodology baseline.
Pillar 7M&E Plan / Logical Frameworks Operational Guidance
Operational dimension of methodology — implementing-partner-facing guidance.
Pillar 8Beneficiary Counting
Beneficiary-counting methodology — direct dependency for Section 8 of FFP Annual Report, GPRA reporting, USAspending public-facing data.
Pillar 9Data Quality Assessments
Audit-defensibility of M&E data — direct GAO-17-224 closure linkage.
Regulatory — Grant Risk Management
Risk-management regulatory provisions binding Title II grant administration. USDA inherits transitional rules pending USDA-equivalent rulemaking.
22 CFR Part 226Grant administration to PVOs (USAID — transitioning)
Risk-management provisions in legacy grant-administration framework. Covered substantially by 2 CFR Part 200; FFP-specific supplemental guidance required.
2 CFR Part 200Uniform Administrative Requirements (Uniform Guidance)
USDA-internal grants risk-management baseline. Single-audit, indirect-cost, and risk-tier provisions apply directly.
ADS 317Acquisition and Assistance Risk Management (USAID — transitioning)
Pre-award risk-classification framework. Input to Enhanced Bellmon Tier 3 strategic-alignment overlay; USDA-equivalent directive required.
Four-Phase Methodology
Phase 1 (Month 5) — Inheritance Baseline
Activity: GAO-17-224 finding inventory; USAID M&E V2.0 review; risk-tier scaffold design
Output: Inheritance baseline + tier scaffold
Phase 2 (Month 5–6) — Framework Design
Activity: Risk-assessment framework construction with Maurice's Afghanistan-era execution as canonical case; insecure-environment evaluation methodology
Output: Framework v1
Phase 3 (Month 6–7) — TPM & Field-Office Architecture
Activity: Third-party monitoring decision tree; field-office posture matrix; cost-benefit framework
Output: Framework v2
Phase 4 (Month 7) — Senior Review & Production
Activity: Senior bench review; OIG-defensibility check; final formatting
Output: PWS Deliverable 5
HSG's Approach
- 1Build the risk-assessment framework for FFP-eligible countries where standard diligence is unavailable — drawing on Maurice House's execution of the first U.S. wheat export to Taliban-led Afghanistan, the canonical case.
- 2Inherit USAID FFP Office Monitoring, Evaluation & Reporting Policy & Guidance V2.0 as M&E baseline.
- 3Close GAO-17-224 audit findings carried forward into USDA tenure.
- 4Design third-party monitoring (TPM) decision criteria — when TPM is appropriate, contract architecture, cost-benefit framework.
- 5Develop evaluation methodologies adapted to insecure environments; build the USDA international field-office relationship architecture.
Sample FrameworkReal Data
Risk-Tier Operating Framework — Real Country Anchors (State Travel Advisory + DoD + OFAC, CY 2026)
| Tier | Example Title II Countries | State Adv. Level | Required Diligence | Field-Office Posture | TPM Decision |
|---|---|---|---|---|---|
| Tier 1 — Stable | Bangladesh · Madagascar · Honduras (selected regions) | Level 1–2 | Standard A-123 controls | Direct USDA field presence | Default to direct monitoring |
| Tier 2 — Constrained | Ethiopia · Pakistan · Mali · DRC (regional access varies) | Level 3 | A-123 + supplemental scoping | Embassy-based posture | TPM available; case-by-case |
| Tier 3 — Insecure | Sudan (RSF/SAF areas) · South Sudan · Yemen (excl. Houthi areas) · Somalia · Burkina Faso | Level 4 | Limited-info diligence + senior-advisory sign-off | Third-country embassy lead | TPM required |
| Tier 4 — Hostile | Afghanistan (Taliban) · Yemen (Houthi-FTO areas) · Syria (OFAC) · Iran (OFAC) · NK (OFAC) | Level 4 | Senior leadership + interagency clearance + OFAC review | Region-managed; no in-country presence | TPM + remote monitoring + senior review |
Tiering anchored on State Department Travel Advisory levels (current), DoD threat classifications, and Treasury OFAC sanctions program list. Tier 4 Yemen reflects Houthi FTO designation reinstated Jan 2025 (Executive Order 14175). Country examples are real and current as of CY 2026; production version updates with each State Travel Advisory refresh.
Performance Metrics
GAO-17-224 finding closure
100% of carried-forward findings closed by Month 7
M&E V2.0 inheritance recommendation
Adoption recommendation with USDA-grade adaptations by Month 6
TPM cost-benefit documentation
Documented for every TPM engagement decision
Field-office architecture coverage
100% of Tier 3–4 countries have documented posture
Risks & Mitigations
Risk
M&E V2.0 methodology gaps under USDA scrutiny
HSG Mitigation
Supplement with FAS / USDA-grade controls (OMB Circular A-123 + A-11 § 185 statistical-model validation as relevant).
Risk
Third-party monitoring contractor quality variance
HSG Mitigation
Qualified-contractor list + reference-check protocol + sample-deliverable review per engagement.
Risk
Insecure-environment evaluation methodology disputes
HSG Mitigation
Anchor on FAS Office of Capacity Building precedent + Maurice's documented Pakistan/Afghanistan execution; OIG pre-review.
Precedent Cases — Direct Execution History
Specific prior work by the HSG senior bench that is structurally analogous to this scope. Each is verifiable through the team member's documented federal employment history.
Maurice W. House — Agricultural Attaché — first US wheat export to Taliban-led Afghanistan
1995–1998
USDA FAS Islamabad post
Canonical case — country-selection AND risk-management decision-making in Tier 4 Hostile operating environment. Maurice executed PL-480 programming in exactly the conditions PWS 3.3 contemplates. Documented federal employment record; verifiable. The single most-direct precedent in HSG's bench for the FFP risk-management problem.
Maurice W. House — Co-chair, interagency global food-crisis task force
2007–2009
USDA / Interagency
Interagency risk-coordination architecture used by President / SecAg / NSC. Direct precedent for senior-leadership / interagency-clearance protocol required for Tier 3–4 country operations under USDA FFP.
Maurice W. House — Senior Agricultural Counselor
2010–2012
USDA FAS Algiers post
FAS post in MENA region during Arab Spring; risk-management execution in destabilizing region. Direct precedent for Mali / Burkina Faso / Sahel Tier 3 operating-environment risk methodology.
Kevin Latner — Senior Agricultural Attaché responsibilities
2014–2019
USDA FAS posting (US Grains Council)
FAS post during US-China trade-war period — risk-management execution under acute geopolitical strain. Direct precedent for Tier 2 Constrained operating-environment methodology.
Audrey McGuire — CEO; HUD Office of Asset Sales Project Financial Advisor
1999–present
Emax Inc.
27 years of federal asset-portfolio risk management on HUD OAS. Direct structural analog to FFP risk management: portfolio-level risk classification, exception monitoring, audit-readiness discipline. OMB Circular A-123 enterprise-risk-management posture directly transfers.
Jelani House — Engagement Manager — HUD OAS QC
Current
House Strategies Group, LLC
HSG's quality-control methodology on HUD OAS — federal-grade audit-readiness, document version control, bidder-facing risk disclosure. The HSG operational-discipline lineage directly relevant to FFP risk-management implementation.
Live Data Sources HSG Will Query
The real public-record data feeds HSG analysts will pull from during this engagement.
| Source | Access | Use Case |
|---|---|---|
| State Department Bureau of Consular Affairs Travel Advisories | travel.state.gov — public; refreshed continuously | Risk-tier anchoring (Levels 1–4); country-by-country diligence-trigger. |
| Treasury OFAC sanctions programs + SDN list | treasury.gov/ofac — public; SDN list downloadable XML/CSV | Tier 4 sanctioned-jurisdiction designation; PVO partner OFAC-screening baseline. |
| DoD National Defense Strategy + posture statements | defense.gov — public | Strategic-competitor designations (China, Russia, Iran, NK); threat-environment classification. |
| GAO audit reports (USAID and USDA) | gao.gov — public, full-text searchable | Audit-readiness baseline; carry-forward finding inventory; GAO-17-224 closure tracking. |
| USDA OIG audit reports | usda.gov/oig — public | USDA OIG audit posture; future audit risk anticipation under FFP transition. |
| ACLED conflict event database | acleddata.com — academic-license; some public | Real-time conflict event monitoring; sub-national risk-tier disaggregation; TPM trigger. |
| GDELT Project events database | gdeltproject.org — public, near-real-time | Global event-stream monitoring; macro signal for risk-tier escalation triggers. |
| FANTA / Tufts Friedman School TPM methodology reports | fantaproject.org — public, academic | Third-party monitoring methodology baseline; TPM contractor capability assessment. |
| USAID/BHA TPM contractor award history | usaspending.gov; USAID historical archives | TPM contractor market mapping (IBTCI, iMMAP, Forcier, Mercy Corps RMU, Acacia, CSI). |
Expected Deliverables
- Risk Management Guide (PWS Deliverable 5) — month 7
- Risk-assessment framework with limited-information scenarios
- USAID FFP M&E V2.0 inheritance and adoption assessment
- GAO-17-224 audit-readiness baseline carry-forward plan
- Third-party monitoring decision tree
- Insecure-environment evaluation methodology
- USDA field-office-to-third-country relationship architecture
Expected Outcome
USDA can scope, monitor, and evaluate FFP operations in non-traditional environments with documented methodology that survives OIG scrutiny.
References
- GAO-17-224 (International Food Assistance: USAID Has Controls for Implementation, March 2017)
- USAID Food for Peace Office M&E Policy & Guidance V2.0
- OMB Circular A-123 (internal controls)
- OMB Circular A-11 § 185 (statistical-model validation, where applicable)
- USDA FAS Risk Management Framework (anticipated)