Attachment A- Performance Work Statement (PWS) (1).pdf

Attachment A

Performance Work Statement

Performance Work Statement (PWS)

Risk Management & Capital Assessment

Projections (RMCAP) Recompete

12/20/2023 (revised)

Version 3.0

Contents Vision Statement

1 General Information

1.1 Introduction

1.2 Background

1.3 Constraints

1.4 Description of Services

1.5 Non-Personal Services

1.6 Period of Performance

1.7 Place of Performance

1.8 Hours of Operation

1.9 Special Qualifications

1.10 Post Award/Kickoff Conference

1.11 Status Meetings

1.12 Contractor Travel

1.13 Transition In

1.14 Transition Out

2 Definitions and Acronyms

2.1 Definitions

2.2 Acronyms

3 Government-Furnished Property and Services

3.1 Government Services

3.2 Facilities

3.3 Equipment

3.4 Materials

3.5 Quality Assurance (QA)

4 Contractor-Furnished Items and Services

4.1 Facilities

4.2 Equipment

4.3 Material

4.4 Contractor Responsibilities

4.5 Contractor Personnel

4.5.1 Special Qualifications

4.6 Identification of Contractor Employees

4.7 Quality Control

4.7.1 Quality Control Plan

5 Specific Tasks

5.1 Work, Data, Code and Method Plans

5.3 Records Management, Delivery, and Review Support

5.4 Transition Services

6 Deliverables

6.1 Acceptance Criteria

7 Performance Requirements Summary

8 Related Documents

Performance Work Statement (PWS)

Risk Management & Capital Assessment Projections

(RMCAP)

Vision Statement

To achieve operational excellence through the development and execution of risk management models for the Federal Housing Administration (FHA) mission critical Single-Family Mortgage Insurance programs.

1 General Information

1.1 Introduction

The U.S. Department of Housing and Urban Development (HUD), Federal Housing Administration (FHA) provides risk management, budget accounting data, and budgetary impact analysis of policy decisions with respect to the Single-Family Mortgage Insurance program. The Single-Family Mortgage Insurance program includes all FHA loan programs other than multi-family and health care facility programs and may include new single-family programs. The current Single-Family Mortgage Insurance program includes programs under Titles I and II of the National Housing Act. Risk Management & Capital Assessment Projections’ (RMCAP) purpose is to ensure that the cash flows, net assets, and valuations arising from the mortgage insurance and financial transactions of the Single-Family Mortgage Insurance program and the level, direction, and implications of the risks to the Single-Family Mortgage Insurance program are made clear. Credit subsidy estimation is the net present value of a new book of business for the current budget year; and credit subsidy re-estimates are annual revisions to prior budget estimates.

1.2 Background

FHA is responsible for the development, maintenance, and improvement of all program area Cash Flow Models (CFMs) used for Credit Subsidy Estimation and Re-estimation.

FHA has employed a variety of financial and statistical models to project its loan performance and cash flow transactions. These models have often used econometric or actuarial techniques and are referred to as Net Present Value (NPV), Return on Asset (ROA), and Credit Subsidy Re-estimate (CSR) models. The four main sets of data points produced for the Single-Family Mortgage Insurance program are:

1. Liability for Loan Guarantee (LLG) accounting data for the annual audited financial statements. The LLG is the present value of anticipated cash outflows such as claim payments (including partial claim payments), premium refunds, property expenses for FHA held properties, and sale expenses for sold properties, less anticipated cash inflows such as premium receipts, and proceeds from property sales on Secretary-held notes.

2. Net Present Values of the cashflows and capital position forecast estimates.

3. Current year budget estimates of the Federal credit subsidy cost.

4. Annual revisions to prior budget estimates of Federal credit subsidy costs.

1.3 Constraints

The services identified in this PWS will adhere to the rules, regulations, laws, standards, and conventions identified by HUD as well as within the Federal Government.

Constraints include the following:

• Compliance with all applicable aspects of:

o OMB Circulars A-11, Preparation, Submission and Execution of the Budget

(RMCAP requirements include support of these activities) -https://www.whitehouse.gov/omb/information-for-agencies/circulars/#procurement o OMB Circular A-123, Managements Responsibility for Internal Control (RMCAP deliverables provide evidence of internal control functions) -https://www.whitehouse.gov/omb/information-for-agencies/circulars/#procurement o OMB Circular A-129, Policies for Federal Credit Programs and Non-Tax Receivables - https://www.whitehouse.gov/omb/information-for-agencies/circulars/#procurement o Federal Accounting and Audit Standards (Federal Accounting Standards Advisory Board (FASAB) Handbook) - https://fasab.gov/accounting-standards/ o Section 508 of the Rehabilitation Act of 1998 -https://www.govinfo.gov/content/pkg/PLAW-105publ220/pdf/PLAW- 105publ220.pdf

• Model risk management in accordance with principles and standards established by the Federal Housing Finance Agency (AB-2013-07-model-Risk-Management- Guidance) et seq. and The Federal Reserve Board and The Comptroller of the Currency (Supervisory Guidance on model Risk Management) et seq.

• Ownership: Ownership and data rights of all the elements, structures and processes feeding into or produced by the databases or other automated tools developed under this contract will be the property of the government. FHA must have effective access, through a custodian designated at FHA’s discretion, to all versions of the RMCAP processes, databases, reports, data, and related documentation at the end of each business day. As expiration of the contract approaches, the contractor shall prepare and deliver all RMCAP data and code to the government’s designee in a machine-readable format as agreed between the parties. The RMCAP data rights should include but not be limited to all versions of the RMCAP processes, databases, models, reports, data, and related documentation.

Compliance with IT Security Requirements - The Contractor shall maintain compliance with all current and future Federal IT security requirements for all data, databases, https://fasab.gov/accounting-standards/ https://www.fhfa.gov/SupervisionRegulation/AdvisoryBulletins/Pages/AB-2013-07-Model-Risk-Management-Guidance.aspx https://www.fhfa.gov/SupervisionRegulation/AdvisoryBulletins/Pages/AB-2013-07-Model-Risk-Management-Guidance.aspx artifacts, processes, and procedures that the contractor manages, develops, modifies, enhances, releases, and/or upgrades. To do this, the Contractor shall:

• Maintain IT security and comply with all terms and conditions of the contract throughout the term of the contract with respect to all data and information technology requirements.

• Use, maintain, enhance, develop, and upgrade all information technology software and system documentation under this Contract in accordance with Federal Laws, best practices, and regulations. This includes, but is not limited to:

1. Federal Information Security Management Act - https://www.dhs.gov/fisma

2. The Privacy Act - https://www.archives.gov/about/laws/privacy-act-1974.html

3. The E-Government Act - https://www.archives.gov/about/laws/egov-act-section-

207.html

4. The Clinger-Cohen Act - https://www.fismacenter.com/Clinger%20Cohen.pdf

5. Government Paper Reduction Act - http://www.hhs.gov/ocio/policy/collection/

6. Office of Management and Budget Circulars A-130, and A-I23 -https://www.whitehouse.gov/omb/circulars_default

7. Office of Management and Budget Memorandum 17-12 https://obamawhitehouse.archives.gov/sites/default/files/omb/memoranda/2017/ m-17-12_0.pdf

8. Department of Housing and Urban Development regulations, Handbooks and Policies - http://www.HUD.gov

9. GAO directives et seq - https://www.gao.gov/agencies/department-housing-and-urban-development

10. Federal Financial Management Improvement Act (FFMIA) -https://obamawhitehouse.archives.gov/omb/financial_ffs_ffmia

11. Publications from National Institute of Standards and Technology (NIST) -https://csrc.nist.gov/publications/sp

12. Federal Records and Retention Acts and Regulations

13. Freedom of Information Act (FOIA) Laws and Regulations

• Maintain Security Assessment and Authorization (SA&A) standards in accordance with guidance published by NIST.

• Follow HUD’s Project Planning and Management (PPM) Life Cycle and industry best practices in the analysis, design, development, testing, and implementation of proposed new systems and/or the enhancement to existing systems. This includes prohibiting live data from being used in any environment other than Production and Disaster Recovery (DR) environments. Specifically, no live data should be used in development, testing, or staging environments.

• Ensure each financial or mixed financial system that the contractor manages, develops, modifies, enhances, releases and/or upgrades is in compliance with the Federal Information system Controls Audit Manual (FISCAM) methodology that include control families for both General Computer (Security Management, Access Controls, Configuration Management, Segregation of Duties, and Contingency Planning) and Business Process Application controls (Application Security, Business Process Controls, Interfaces, and Data Management).

https://www.dhs.gov/fisma https://www.archives.gov/about/laws/privacy-act-1974.html https://www.archives.gov/about/laws/egov-act-section-207.html https://www.archives.gov/about/laws/egov-act-section-207.html https://www.fismacenter.com/Clinger%20Cohen.pdf http://www.hhs.gov/ocio/policy/collection/ https://www.whitehouse.gov/omb/circulars_default https://obamawhitehouse.archives.gov/sites/default/files/omb/memoranda/2017/m-17-12_0.pdf https://obamawhitehouse.archives.gov/sites/default/files/omb/memoranda/2017/m-17-12_0.pdf http://www.hud.gov/ https://www.gao.gov/agencies/department-housing-and-urban-development https://www.gao.gov/agencies/department-housing-and-urban-development https://obamawhitehouse.archives.gov/omb/financial_ffs_ffmia https://csrc.nist.gov/publications/sp

• Ensure compliance with identified OMB A-123 Appendix A "Management's Responsibility for Internal Control" and Appendix D "Compliance with the Federal Financial Management Improvement Act of l996 key controls; and the Federal Information Security Management Act of 2002 (FISMA) to include:

1. National Institute of Standards and Technology (NIST) Special Publication (SP)

800-53, Security and Privacy Controls for Federal Information systems and Organizations, Revision 5 (NIST SP 800-53, Rev. 5)

2. NIST SP 800-18 Rev. 5 - Guide for Developing Security Plans for Federal Information systems

3. NIST SP 800-23 - Guidelines to Federal Organizations on Security Assurance and Acquisition/Use of Tested/Evaluated Products

4. NIST SP 800-30 Rev. 5 - Guide for Conducting Risk Assessments

5. NIST SP 800-34 Rev. 5 - Contingency Planning Guide for Federal Information systems

6. NIST SP 800-37 Rev. 5 - Guide for Applying the Risk Management Framework to

Federal Information systems

7. NIST SP 800-47 - Security Guide for Interconnecting Information Technology systems

8. NIST SP 800-53A Rev. 5 - Guide for Assessing the Security Controls in Federal

Information systems and Organizations, Building Effective Security Assessment Plans

9. NIST SP 800-59 - Guideline for Identifying an Information system as a National Security system

10. NIST SP 800-60 Rev. 5 - Guide for Mapping Types of Information and Information systems to Security Categories

11. NIST SP 800-84 - Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities

12. Federal Information Processing Standards (FIPS) 199/200 Security Categorization Analysis

13. FIPS 191 - Guideline for the Analysis of Local Area Network Security

In addition, the Contractor shall:

• Ensure business services can function within the Federal government’s IT protocols and requirements.

• Employ standard network security practices that comply with HUD OCIO’s IT

Security Policy Handbook 2400.25:

https://www.hud.gov/program_offices/administration/hudclips/handbooks/cio/2400.2

• Employ Secured Socket Layer (SSL) transmission protocol.

• Comply with NIST and FISMA standards to safeguard CCAP data that is classified as having a Moderate information security baseline.

• Support dynamic registration.

• Provide HUD with the attribute/values they need in the assertion to map to the users contained in their user store.

• Provide managed, secure, and controlled access to its application for interfacing with HUD systems and users.

• Make every reasonable effort to deliver information technology products to HUD free of known computer viruses by examining all products prior to delivery to HUD using tools and processes capable of virus detection.

Failure by the Contractor to adhere to the above NIST requirements could result in penalties, to include a contract performance stop-work order until compliance can be demonstrated. Disregarding these NIST requirements could also lead to other criminal, civil, administrative, or contract penalties, including, but not limited to:

• Breach of Contract damages

• False Claims Act damages

• Liquidated Damages

• Termination for Default

• Termination for Convenience

• Poor Past Performance

• Suspension/debarment

Compliance with Privacy Requirements - The Contractor shall maintain compliance with OMB Memorandum 17-12 (Preparing for and Responding to a Breach of Personally Identifiable Information), which requires contractors and sub-contractors (at any tier) to:

• Cooperate with and exchange information with agency officials, as determined necessary by the agency, to effectively report and manage a suspected or confirmed breach

• Properly encrypt PII in accordance with OMB Circular A-130 and other applicable policies and to comply with any agency-specific policies for protecting PII

• Provide and participate in mandatory training on how to identify and report a breach

• Report a suspected or confirmed breach in any medium or form, including paper, oral, and electronic, as soon as possible and without unreasonable delay, consistent with the agency's incident management policy and US-CERT notification guidelines

• Maintain capabilities to determine what Federal information was or could have been accessed and by whom, construct a timeline of user activity, determine methods and techniques used to access Federal information, and identify the initial attack vector

• Allow for an inspection, investigation, forensic analysis, and any other action necessary to ensure compliance with OMB M 17-12, the agency's breach response plan, and to assist with responding to a breach

• Identify roles and responsibilities, in accordance with OMB M 17-12 and the agency's breach response plan

• Explain that a report of a breach shall not, by itself, be interpreted as evidence that the contractor or its subcontractor (at any tier) failed to provide adequate safeguards for PII

Data Handling - The Contractor shall follow these rules when handling all data related to this requirement:

• The Contractor and its employees shall not divulge, or release data or information developed or obtained during performance of this contract without written approval of the Contracting Officer

• Information contained in all source documents and other media provided by HUD is the sole property of HUD

• Include the following statement on deliveries of hardware, software, and all data media made set forth in this contract: "This product has been scanned for known viruses using [name of virus-screening product, including version number, if any] and is certified to be free of known viruses at the time of delivery”

• Adhere to HUD’s policies for safeguarding sensitive electronically formatted information

• As expiration of the contract approaches, the contractor shall prepare and deliver all RMCAP data and code to the government’s designee in a machine-readable format.

The RMCAP data rights include but are not limited to all versions of the RMCAP processes, databases, models, reports, data, and related documentation.

Additional Constraints include the following Acts/notices that govern how the program funds receive their authority and/or are to be managed:

• The National Housing Act of 1934 (Section 203(b) authorizes MMIF

• The Housing and Community Development Act of 1987(authorized HECM)

• Cranston-Gonzalez National Affordable Housing Act of 1990 (capital ratio)

• Federal Credit Reform Act (FCRA) of 1990 (capture cost of credit programs on a budgetary basis)

• The Housing and Economic Recovery Act of 2008 (added HECM to MMIF)

• FHA Mortgagee Letters that inform FHA-approved lenders of new programs or changes

1.4 Description of Services

The Contractor shall provide risk management statistical models, cash flows, and valuations arising from the mortgage insurance and financial transactions support services. These support services shall include:

1. Work, Data, Code and Method Plans

2. Modeling, Reporting, and Performance Tracking

3. Records Management, Delivery, and Review Support

4. Transition Services

Detailed descriptions of specific tasks are provided in Section 5 Specific Tasks and Deliverables.

1.5 Non-Personal Services

The Government will neither supervise Contractor employees nor control the method by which the Contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual Contractor employees. It shall be the responsibility of the Contractor to manage its employees and to guard against any actions that are of the nature of personal services or give the perception of personal services.

If the Contractor believes that any actions constitute, or are perceived to constitute, personal services, it shall be the Contractor's responsibility to notify the Contracting Officer (CO) immediately. These services shall not be used to perform work of a policy, decision making, or management nature, i.e., inherently Government functions. All decisions relative to programs supported by the Contactor shall be the sole responsibility of the Government.

1.6 Period of Performance

The Period of Performance shall be for one (1) 12-month base period and four (4) 12-month option periods.

1.7 Place of Performance

The services to be performed under this contract shall be at the Contractor's facility.

1.8 Hours of Operation

T The Contractor is responsible for providing services between the hours of 8:00 am to 5:00 pm ET, Monday thru Friday. The Government reserves the right to change hours of operation or restrict contractor access. Government agencies will not be available during scheduled holidays, weekends, and after duty hours. Government agencies may also not be available during periods of inclement weather in specific localities as determined by the Office of Personnel Management’s Official Operating Status found at

- https://www.opm.gov/policy-data-oversight/snow-dismissal-procedures/current-status/ The Contractor shall, at all times, maintain an adequate workforce for the uninterrupted performance of all tasks defined within the contract when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce is essential.

1.9 Special Qualifications

See Key Personnel requirement in Section 4.5

1.10 Post Award/Kickoff Conference

The Contractor shall attend the post award conference convened by the contracting activity or contract administration office in accordance with FAR Subpart 42.5. The Government intends to convene a Post Award Conference with the Contractor within ten business days after contract award. The Contracting Officer will notify the Contractor on specific date, time and location, and agenda within five business days after contract award. Due to COVID-19 the meeting may be held on Microsoft Teams.

1.11 Status Meetings

The Contracting Officer, Contracting Officer’s Representative (COR) and other Government personnel, as appropriate, may meet periodically with the Contractor to review Contractor performance, requirement status, etc. At these meetings, the Contracting Officer may provide feedback to the Contractor of how the Government views the Contractor's performance or progress of the requirement. These meetings and any feedback received does not take the place of HUD’s inspection and acceptance of services, the contractor’s responsibility for quality control and compliance with contract requirements, and HUD’s formal assessment of contract performance. The Contractor will apprise the Government of problems, if any, being experienced.

Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government. Post Award Conference and subsequent meetings may be held via teleconference.

1.12 Contractor Travel

No Contractor travel is anticipated during the performance period of this contract.

1.13 Transition In

The Contractor shall, upon the Contracting Officer's written notice, furnish Transition-In services as required. As a successor, the Contractor shall have sufficient personnel on board during the 120 days Transition-In period to ensure a smooth transition with the incumbent Contractor. The Contractor shall provide an orderly transition of work acceptance and accomplishment such that any impact to the program is minimized.

During the Transition-In period, the Contractor shall become familiar with the requirements to commence full performance of services by the end of the contract Transition-In period.

1.14 Transition Out

To minimize any decrease in productivity and to prevent possible negative impacts on additional services, the Contractor shall have sufficient personnel on board during the 120 days Transition-Out period. The incumbent Contractor shall ensure a smooth transition with the successor Contractor during the Transition-Out period, prior to completion of contractual performance. The incumbent Contractor shall aid the successor in the development of plans, procedures, and methods for the assumption of all on going work. The Contractor shall provide an orderly transition of work acceptance and accomplishment, such that full control by the successor Contractor is achieved by the end of the new contract Transition-In period.

2 Definitions and Acronyms

2.1 Definitions

Artifacts – Documents, Models, Databases, SAS Code, Job Scripts, Input and Output data, and all other items created, developed, or used in performance of this requirement.

Business/Workdays - Every official workday of the week which are days between and including Monday to Friday. This does not include federal holidays and weekends.

Calendar Day - Any day of the week.

Contractor - A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Contracting Officer (CO) - A person with authority to enter into, administer, and/or terminate contracts and make related determinations and findings on behalf of the Government. Note: the only individual who can legally bind the Government.

Contracting Officers Representative (COR) - An employee of the U.S. Government appointed by the Contracting Officer to perform contract administration activities in regard to technical issues. This individual has authority to provide technical direction to the Contractor as long as direction is within the scope of the contract, does not constitute a change and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

Defective Service - A service output that does not meet the standard of performance associated with the Performance Work Statement.

Deliverable - Anything that can be physically or electronically delivered but may include non-manufactured things such as meeting minutes or reports.

Government Furnished Property (GFP) - Government-furnished property means property in the possession of, or directly acquired by, the Government and subsequently furnished to the Contractor for performance of a contract. Government-furnished property includes, but is not limited to, spares and property furnished for repair, maintenance, overhaul, or modification. Government-furnished property also includes contractor-acquired property if the contractor-acquired property is a deliverable under a cost contract when accepted by the Government for continued use under the contract.

Performance Requirements Summary (PRS) - A listing of the performance requirements under the contract that are to be evaluated by the Government on a regular basis, performance indicators for these requirements, performance standards for these requirement and surveillance methods to be used to determine if performance standards are met.

Performance Standard - The Contractor's performance level required by the Government.

Performance Work Statement (PWS) - A statement of work for a performance-based acquisition that describe the required results in clear, specific, and objective terms with measurable outcomes.

Physical Security - Actions that prevent the loss or damage of Government property.

Quality Assurance (QA) - Policies and procedures adopted by the Government to ensure that supplies and services acquired under Government contracts conform to the contracts quality requirements.

Quality Assurance Surveillance Plan (QASP) - A plan describing how the agency will survey, observe, test, sample, evaluate and document the Contractor's performance in meeting critical performance standards identified in the contract.

Quality Control (QC) - All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

Service Contract - A contract that directly engages the time and effort of a Contractor whose primary purpose is to perform an identifiable task rather than to furnish an end item of supply.

Subcontractor - Any person, other than the prime Contractor, who offers to furnish or furnishes any supplies, material, equipment, or services of any kind under a prime contract or a subcontract entered into in connection with such prime contract, and any person who offers to furnish or furnishes general supplies to the prime contractor or a higher tier subcontractor. The Government does not have privity of contract with a subcontractor.

Work Week - Monday through Friday, unless specified otherwise.

2.2 Acronyms

AB – FHFA Advisory Bulletin AQL - Acceptable Quality Level CFM – Cash Flow Models CO - Contracting Officer COR - Contracting Officer Representative CSR - Credit Subsidy Rate DR – Disaster Recovery ETL - Extract, Transform and Load FASAB - Federal Accounting Standards Advisory Board FAR – Federal Acquisition Regulation FFMIA - Federal Financial Management Improvement Act FHA Federal Housing Administration FHFA – Federal Housing Finance Agency FIPS - Federal Information Processing Standards FISCAM – Federal Information System Controls Audit Manual FISMA – Federal Information Security Management Act GAO – U.S. Government Accountability Office GFP – Government-Furnished Property HECM - Home Equity Conversion Mortgage HERMIT - Home Equity Reverse Mortgage Information Technology HPA – House Price Appreciation HUD – U.S. Department of Housing and Urban Development HUDAR – HUD Acquisition Regulation IDB – FHA Integrated Database

IT – Information Technology LLG – Liability for Loan Guarantee MAD- Market Analysis Division MIP - Mortgage Insurance Premium NIST – National Institute of Standards and Technology NPV - Net Present Value OCIO – Office of the Chief Information Officer OCPO - Office of the Chief Procurement Officer OIG – Office of the Inspector General OMB – Office of Management and Budget ORMRA – Office of Risk Management and Regulatory Affairs PEA - Presidents Economic Assumptions PII - Personally Identifiable Information PM - Project Manager POC - Point of Contact PPM – Project Planning and Management QA - Quality Assurance QASP - Quality Assurance Surveillance Plan QCP - Quality Control Plan RMCAP - Risk Management & Capital Assessment Projections ROA - Return on Assets SA&A - Security Assessment and Authorization SER - Single Effective Rate SF - Single-Family SFDW - Single Family Data Warehouse SP – Special Publication SQL – Structured Query Language SSL- Secured Socket Layer T&I - Taxes and Insurance UPB - Unpaid Principal Balance US-CERT – United States Computer Emergency Readiness Team

3 Government-Furnished Property and Services

The Contractor shall ensure accurate control and accountability of all Government- Furnished Property (GFP) in accordance with the terms and conditions of this contract.

The Government will furnish, at no cost to the Contractor, the GFP shown below.

3.1 Government Services

No Government Services will be provided.

3.2 Facilities

No Facilities will be provided by the Government.

3.3 Equipment

No Equipment will be provided by the Government.

3.4 Materials

Copies of required materials will be provided to the Contractor in hard copy or soft copy.

All materials will remain the property of the Government and will be returned to the COR at the end of the contract period.

For each task in Section 5, the Government will provide, as applicable, all base datasets required for all models. This shall include the following sources of data from the Federal Housing Administration (FHA): Single Family Data Warehouse (SFDW); the Home Equity Reverse Mortgage Information Technology (HERMIT) System; the FHA Integrated Database (IDB); and other systems for all applicable cohorts of loans:

• Original underwriting information, current loan status (e.g., active, terminated, or claim), and termination date.

• Historical data on default and delinquency episodes.

• Status of active loans (e.g., current, 30 days delinquent, 60 days delinquent, number of missed payments, etc.).

• Historical data on claims, including outstanding unpaid principal balance (UPB), claim processing date, and loss mitigation data.

• Historical credit scores for loans insured prior to 2004 (for all loans for which it is available).

The Government will also provide projections of home prices, interest rates and unemployment rates available to FHA through commercial forecasts, and the President Economic Assumptions (PEAs).

3.5 Quality Assurance (QA)

The Government shall evaluate the Contractor's performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan defines how performance standards will be applied, the frequency of surveillance, and minimum acceptable quality levels.

4 Contractor-Furnished Items and Services

The Contractor shall furnish all items as described below to perform work under this contract.

4.1 Facilities

The contractor shall furnish the facilities to meet the requirements under the PWS.

4.2 Equipment

The Contractor shall furnish all equipment and supplies required to perform the work under this contract.

4.3 Material

The contractor shall furnish all material required to perform the work under this contract outlined within the PWS, except for the Government-furnished materials listed in Section 3.

4.4 Contractor Responsibilities

The Contractor shall only conduct business with the designated Government personnel listed as points of contact (POCs). Names of the authorized personnel shall be provided to the Contractor by the Government in writing and updated as necessary throughout the contract period. U.S. Government records, copies of original results and reports, verified original data, corrected data, and corrected supporting final reports which are maintained by the Contractor remain the property of the U.S. Government. These files/results shall be surrendered to the COR upon request.

4.5 Contractor Personnel

The Contractor shall provide a Project Manager who shall be responsible for the performance of work. An alternate shall also be designated to act in the absence of the Project Manager. These Contractor personnel are considered Key Personnel by the Government and shall be listed as such in accordance with HUDAR 2452.237-70, "Key Personnel. The Project Manager and alternate shall have full authority to act on all contract matters relating to daily operations of this contract. Accordingly, at a minimum, the points of contact shall have the technical knowledge of the requirement and be in the position to actually receive assignment, guidance, and direction from the COR, PM and CO per HUDAR 2452.237-73, "Conduct of Work and Technical Guidance" and shall be allocated enough hours to the requirement to ensure successful performance. These points of contact shall each be an employee of the Contractor. An employee of a subcontractor is not acceptable for either of these positions. The Project Manager or alternate shall be available between the hours of 8:00am to 5:00pm Monday through Friday ET, except Federal Holidays or when the Government facility is closed during periods of inclement weather in specific localities as determined by the Office of Personnel Management’s Official Operating Status found at -https://www.opm.gov/policy-data-oversight/snow-dismissal-procedures/current-status/

4.5.1 Special Qualifications

The Contractor shall employ a sufficient number of experienced staff dedicated to this contract with technical capabilities to complete the deliverables in a timely, accurate, and concise manner, as set forth in the performance work statement.

https://www.opm.gov/policy-data-oversight/snow-dismissal-procedures/current-status/

The Contractor’s staff shall possess professional knowledge of Federal Credit Reform Act accounting; financial transaction analysis and business intelligence methods, practices, and software; credit subsidy and subsidy re-estimates formulation, economic modeling, and software; budget execution; internal controls; Federal information technology security standards; and experience with associated software and programming languages. Specific knowledge of the mortgage loan generation and guaranty processes; FHA single family and HECM (Home Equity Conversion Mortgage) loan risk category budgetary and operational risks; and data warehousing structures, cloud-based storage and SAS Viya operations are also required.

Key personnel shall be identified by name and resume in the proposal and include:

a. Project Manager

b. Assistant Project Manager

c. Lead Modeler

d. Database Administrator

e. SAS EG and Viya Support Lead

Key contractor personnel shall have relevant skills and experience as follows:

a. Project Manager

Minimum of ten years of demonstrated experience in the ability to: apply fundamental and diversified professional technical concepts, theories and practices to achieve management and technical objectives with versatility, judgment and perception; adapt and apply methods and techniques of related scientific disciplines; and organize, analyze, interpret, and evaluate data in the solution of technical problems.

PMP or similar certification.

b. Assistant Project Manager

Minimum of seven years of demonstrated experience in the ability to: apply fundamental and diversified professional technical concepts, theories and practices to achieve management and technical objectives with versatility, judgment and perception; adapt and apply methods and techniques of related scientific disciplines; and organize, analyze, interpret, and evaluate data in the solution of technical problems.

Demonstrable experience with policy analysis, data analysis, trend analysis and data modeling using large and complex data sets.

The Project Manager and Assistant Project Manager should also be able to provide demonstrated experience as Subject Matter Experts in the Single Family Forward and HECM industry as follows: Single Family Forward and HECM finance industry practitioner, with expertise in all of housing finance’s related disciplines: loan origination, servicing, primary and secondary market activities; project and institutional risk management; real estate based lending; credit underwriting; portfolio supervision;

regulatory work in specialized, lending institutions, capital markets operations, and securitization.

c. Lead Modeler

Master's degree or PHD in economics, finance, statistics, or mathematics and expert Statistical Analysis System (SAS) experience necessary. Must possess a background in statistics, analytics, knowledge of actuarial science, data mining, and visualization, and demonstrated experience building a default model and early warning tool to assess portfolio and loan-level risk.

d. Database Administrator

Demonstrated experience in: the development and management of Oracle, SQL, SAS, and cloud-based databases; creation and maintenance of Extraction, Transformation, and Loading (ETL) tools to import data from multiple data sources and systems, using various file delivery media; and familiarity and experience with cloud technologies such as Microsoft Azure or Amazon AWS, etc.

e. SAS EG and Viya Support Lead

Demonstrated experience developing SAS Viya Business Intelligence reports in Visual Analytics; creating and maintaining SAS metadata; and developing and coding projects in SAS Viya cloud computing environment using CAS libraries. Experience in application of SAS patches and upgrades preferred but not required.

Key staff are required to possess these special qualifications. Should there be a change in key personnel during the contractual relationship, the Contractor shall guarantee that the replacement shall meet or exceed the capabilities required to accomplish the tasks set forth in this contract, and the change must be approved by HUD.

At the Contractor's discretion, more than one of the skill sets listed may be filled by one person; however, if that person leaves the contract, all skill sets possessed by that person must be replaced. The Contractor shall immediately notify the COR upon termination of any employee with security access to HUD systems.

Key personnel criteria are the extent to which the offeror identifies the professional staff to be assigned to the tasks required in the Performance Work Statement and shows how the skills, knowledge, training, and experience of these persons relate specifically to the work to be undertaken. The Contractor shall provide an explanation of the organization of the team or teams which will conduct the work, which persons would be assigned lead responsibility for specific tasks, and a description of the experience and knowledge of each person on the team shall be provided along with resumes of all key personnel. Identify how each person would be classified in accordance with the staffing level requirements.

The Contractor shall also ensure that sufficient staff are available to provide the same level of support in the event that a key staff member will be out of the office for more than one week.

Key Personnel must possess the following expertise:

1. SAS software - experience should include, but is not limited to Base SAS, Stat

Graph, SAS Interface to database and PC file formats, SAS ETS (econometric, time series and forecasting techniques), and SAS Enterprise Guide.

2. Cloud-based SAS Viya and SAS Visual Statistics - experience should include Business Intelligence web report development and deployment into a production environment.

3. Cloud computing environments such as Microsoft Azure or AWS - experience should include deploying a cloud enabled ETL (Extract, Transform & Load) solution as a database administrator with Agile and Scrum certifications.

4. Professional modelling using various advanced statistical techniques, such as multiple variable logistic regression, random forest, OLS (Ordinary Least Squares) multiple regression, stepwise regression, and ridge or lasso regression - experience should include a strong background in credit risk scoring and deployment of multiple models in a production environment.

5. Java, C#, C++ and/or Python coding

6. Advanced data processing (ability to avoid overfitting, underfitting, and explaining in a clear concise visual way the accuracy, benefits, and drawbacks of various models and the intuition behind such models)

7. Single Family real estate to include a combination of Single Family Forward and HECM - experience should include working with the various HUD-insured and non-insured portfolios that include Single Family Forward and HECM.

4.6 Identification of Contractor Employees

All Contractor/subcontractor personnel shall wear company picture identification badges as to distinguish themselves from Government employees. When conversing with Government personnel during business meetings, over the telephone, or via electronic mail, Contractor /subcontractor personnel shall identify themselves as such to avoid situations arising where sensitive topics might be better discussed solely between Government employees. Contractors/subcontractors shall identify themselves on any attendance sheet or any coordination documents they may review. Electronic mail signature blocks shall identify their company affiliation. Where practicable, Contractor/subcontractors occupying collocated space with their Government program customer shall identify their workspace area with their name and company affiliation, or at a minimum, "Contractor" after name.

4.7 Quality Control

The Contractor shall establish and maintain a complete quality control program that shall ensure services are performed in accordance with this contract. The Contractor shall develop and implement procedures to identify, prevent, and ensure non reoccurrence of defective services. The Contractor's quality control program is how the vendor assures that work complies with the requirements of the contract. The Contractor shall provide the associated Quality Control Plan to the Government as directed.

4.7.1 Quality Control Plan

The Contractor shall develop, maintain, enforce, and document a Quality Control Plan (QCP) that ensures the Government receives the level of quality that is consistent with the requirements specified in this contract.

The QCP shall:

• Be sufficiently detailed to provide the Contractor's methodology for identifying and recruiting qualified personnel.

• Provide the Contractor's methodology for resolving problems identified by the

Government during reviews conducted in accordance with its Quality Assurance Surveillance Plan (QASP).

• Provide the Contractor's methodology for establishing an internal feedback system for support personnel, and for resolving problems identified by that feedback system.

• Demonstrate and validate that the services or deliverables to be provided under the contract are completed with a level of quality that meets the minimum performance threshold established in the Government's QASP.

• Address Quality Management Approach, Quality Assurance, Quality Control and Quality Standards.

The Contractor's QCP shall be delivered with the proposal.

5 Specific Tasks

The following section outlines the tasks and deliverables required to build and enhance RMCAP to answer relevant policy questions and meet the reporting needs of FHA. All artifacts are to be kept current as updates occur with source databases, ETL, model methods, code, and FHA program terms. These updates shall occur at least once, annually.

5.1 Work, Data, Code and Method Plans

The Contractor shall develop and maintain the following plans to be used in managing contract requirements:

• Management Work Plan (MWP)

• Input Data Architecture Plan

• Output Data Architecture Plan

• Code Architecture Plan

• Model Methodology Plan

The first 60 calendar days of the base year will allow the Contractor to transition in and shall include the refining of operational support functions and "ramp up” of staff to perform the tasks outlined within Section 5 Specific Tasks. During the Transition period, the Contractor shall attend post award and other meetings with HUD to ensure smooth transition, as applicable. Within six weeks of the kick-off meeting, the Contractor shall present a draft of each plan. Once FHA reviews the drafts and provides feedback, the Contractor shall make modifications as necessary. Updated plans will be delivered to the Government within five business days of receipt of client feedback. The Contractor shall submit a final initial version of each plan via email to the COR 90 days after contract award.

The Contractor shall update the plans each option year, in coordination with FHA, to incorporate changed information and submit the draft modified plan(s) for review and approval within two weeks of beginning of the option year. The final updated plan(s) are to be delivered to the COR 90 days after the beginning of each option year.

5.1.1 Management Work Plan

The Management Work Plan (MWP) establishes specific plans for analysis of the prior period’s model performance in each year of the contract to determine what changes need to be incorporated in the models for the upcoming performance year.

The MWP shall include the following information:

• A breakdown of the project into specific activities, indicating which tasks are dependent upon the completion of others

• A schedule indicating when each task shall begin, estimated time to completion, and who shall perform the task

• The actions necessary to achieve project goals, as well as associated risks and mitigation strategies to ensure that the project remains on schedule

• A specified analysis plan for each of the tasks

5.1.2 Input Data Architecture Plan

The Input Data Architecture Plan documents how the Contractor will perform the tasks needed to validate the input data being used under this contract.

The plan shall include the following components or features:

• A comprehensive dataset (full input dataset) of historical performance and loan characteristics. Its critical components include a mapping of mortgage life-cycle events and transactions to FHA data to create model variable specifications with explicit data rules, transformational calculations, justification for choice of variable, and transformations. Discretion may be used in the design of its data structures, modularity of statistical code, and evaluation of alternative specifications for their advantages, disadvantages, and trade-offs in meeting FHA objectives.

• Investigations of the available data sources that shall include:

1. Reviews of the data for missing or incomplete fields.

2. Resolution of conflicted, missing, or ambiguous data definitions among multiple sources.

3. Clarification of data-related questions with FHA.

4. Development of ETL protocols for each data source to automate access by modeling systems.

5. Identification of potential sources of data other than sources of proprietary subscription data already in use at FHA that could augment modeling.

6. Creation of efficient and readable naming conventions that shall also apply to global macro variables, intermediate processing variables, and output data.

7. Development of a detailed dictionary of all data elements proposed for use in modeling, including recommended data ETL protocols. This will include:

o An explanation of each variable’s content o Its scale and precision (number of decimal places) o Its importance to modeling o Its source in FHA data systems o Transformations performed for implementation in models and reports o Quality issues (e.g.: reporting lags that compromise modeling or reporting integrity) and the remediation of such issues.

5.1.3 Output Data Architecture Plan

The Output Data Architecture Plan documents how the Contractor will perform the tasks needed to validate the data output under this contract. The Output Data Architecture Plan shall explain or specify how it will ensure the following:

• Output data is structured to provide a high degree of usability and diagnostics confirming model validity and analysis.

• Standard reports accurately and completely summarize key information and illuminate trends in projected loan performance given differing scenarios in economic assumptions, model methods and program terms.

• Output data is used to diagnose possible flaws in model construction, for example by using alternative formulae to calculate output measures and show consistency with model assumptions and program terms, creating rich output such as cohort/policy year "finger tables” that show cumulative and conditional rates of performance and economic projections across the portfolio and by critical select sub-populations.

Distributional analysis shall be used to identify outliers and questionable model results.

• Loan-level output data (the "Rich Output Dataset”) allows for rapid analysis using standard statistical software tools such as SQL, cross-tabulation, and percentile distributions as well as supporting covariance analysis to include various regression estimations.

All output data, including loan-level sets, will strive for a standard of "no knowledge loss” where any program-relevant data is present in the model output or can be easily generated using common data manipulations such as SQL and relational data structures.

5.1.4 Code Architecture Plan

The Code Architecture Plan documents how the Contractor will perform the tasks needed to validate the architecture of the code being used under this contract. The plan shall identify best practices and quantitative methods to locate the best code design to address a spectrum of objectives.

The Code Architecture Plan shall include the following:

• A strategy for using data structures to support efficiency of storage and processing times.

• A complete discussion of the advantages and disadvantages of using relational database techniques.

• Data structures allowing for the direct over-ride of any value affecting model results and code that shall enable "one command execution” to allow for rapid sensitivity testing and policy analysis.

• Cost-benefit consideration of how data structures help or hinder: processing times, flexibility to incorporate sensitivity testing and changes to program terms, modification of code modules, and utility of output data.

• A strategy for…