DHS Security Management directive 0810.1 requires the reporting of suspected fraud to:

a. FEMA Director

b. Homeland Security Investigations (HSI)

c. Local law enforcement

d. Office of the Inspector General (OIG)