Solicitation 86615723R00004_Amendment 0001_ Attachment 1_Revised PWS.pdf

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

Revised PWS

Performance Work Statement (PWS)

Commercial Capital Assessment Projections

(CCAP)

8/11/2023 (revised)

Version 2.5

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

Vision Statement

1 General Information

1.1 Introduction

1.2 Background

1.3 Constraints

1.4 Description of Services

1.5 Non-Personal Services

1.6 Period of Performance

1.7 Place of Performance

1.8 Hours of Operation

1.9 Special Qualifications

1.10 Post Award/Kickoff Conference

1.11 Status Meetings

1.12 Contractor Travel

1.13 Transition In

1.14 Transition Out

2 Definitions and Acronyms

2.1 Definitions

2.2 Acronyms

3 Government-Furnished Property and Services

3.1 Government Services

3.2 Facilities

3.3 Equipment

3.4 Materials

3.5 Quality Assurance (QA)

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

4 Contractor-Furnished Items and Services

4.1 Facilities

4.2 Equipment

4.3 Material

4.4 Contractor Responsibilities

4.5 Contractor Personnel

4.6 Identification of Contractor Employees

4.7 Quality Control

4.7.1 Quality Control Plan

5 Specific Tasks

5.1 Task One – Start Up/Transition-In (If Applicable) ........... Error! Bookmark not defined.

5.2 Task Two – Independent Verification and Validation ...... Error! Bookmark not defined.

5.3 Task Three – Delivery, Testing, and Validation of Web-based CCAP Business Service

............................................................................................ Error! Bookmark not defined.

5.4 Task Four –Testing ........................................................ Error! Bookmark not defined.

5.5 Analyze and identify elements needed to achieve CCAP objective Error! Bookmark not defined.

5.6 Provide risk measurement and monitoring information ... Error! Bookmark not defined.

5.7 Estimate the performance of the loan risk categories, cohorts and portfolios used to generate the guaranty liability .............................................. Error! Bookmark not defined.

5.8 Provide Menu-Driven Policy Analysis (MDPA) ............... Error! Bookmark not defined.

5.9 Provide budget performance estimates and re-estimates. ............. Error! Bookmark not defined.

5.10 Report Storage and Retrieval ....................................... Error! Bookmark not defined.

5.11 OPIIS Services ............................................................. Error! Bookmark not defined.

5.12 Transition-Out .............................................................. Error! Bookmark not defined.

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

6 Deliverables

6.1 Quality Control Plan

6.2 Acceptance Criteria ........................................................ Error! Bookmark not defined.

7 Performance Requirements Summary

8 Related Documents .......................................................... Error! Bookmark not defined.

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

Performance Work Statement (PWS)

Commercial Capital Assessment Projections (CCAP)

Vision Statement

To achieve operational excellence through the development and execution of risk management models for the Federal Housing Administration (FHA) mission critical Commercial Mortgage Insurance programs.

1 General Information

1.1 Introduction

The U.S. Department of Housing and Urban Development (HUD), Federal Housing Administration (FHA) provides risk management, portfolio analyses and modeling, and budgetary impact analysis of policy decisions with respect to the capital position of the Mutual Mortgage Insurance Fund (MMIF) and General Insurance/Special Risk Insurance (GI/SRI) Funds, and Federal real estate credit subsidies associated with existing Multi-Family programs.

Commercial Capital Assessment Projections’ (CCAP) purpose is to ensure that the cash flows, net assets, and valuations arising from the mortgage insurance and financial transactions of Multi-Family programs and the level, direction, and implications of the risks to the Multi-Family program are exposed and mitigated to avoid:

• Audit findings, Office of Management and Budget rejection/disapproval, Independent Validator negative conclusions, or other public or internal leadership issue or concern that damages the reputation or successful operations of HUD and/or FHA.

• Missed deadlines for statutory requirements.

• Data, report, or model access issues.

Multi-Family Housing programs comprise all FHA loan programs including all programs managed by the Office of Healthcare Programs, Office of Residential Care Facilities, and Office of Hospital Facilities. Other than multi-family and health care family facility programs and may include new single-family programs.

1.2 Background

The Federal Housing Administration (FHA) was created by the National Housing Act of 1934 following the Great Depression, to improve housing standards and conditions, to provide an adequate home financing system through the provision of insurance for housing mortgages, and for stabilizing the housing market. FHA is a critical part of the U.S. economy, helping first-time homebuyers and low-income borrowers to access long-term, low down-payment loans. The FHA Comptroller’s office has responsibility for all

Solicitation 86615723R00004 /Amendment 0001 Attachment 1 accounting and external and internal financial reporting for the agency. FHA’s Office of Risk Management and Regulatory Affairs (ORMRA) assists in preparing financial statements and budget submissions in accordance with the Credit Reform Act of 1990 et seq. Modeling (primarily, but not necessarily limited to, refining, and updating existing cash flow models and statistical models) shall be necessary to compute the Liability for Loan Guarantees and Credit Subsidy Rates to support these activities.

Economic analysis (Credit Reform Act support) consists of but is not limited to:

development, validation, refinement of multi-family and health care Loan Loss Reserve (LLR), Liability for Loan Guarantees (LLG), mark-to-market (MTM), Credit Subsidy Rates (CSR), and recovery on assets (ROA) cash flow models and projections;

preparation of gathered balance sheets per format requirements for the FHA financial statements; preparation and update of cash flow model assumptions and documentation; performance of decomposition and sensitivity analysis on the cash flow models and projections; development, refinement, and maintenance of actuarial and multivariate statistical loan performance models; and provision of Credit Reform Act and SAS training.

1.3 Constraints

The services identified in this PWS will adhere to the rules, regulations, laws, standards, and conventions identified by HUD as well as within the Federal Government.

Constraints include the following:

• Compliance with all applicable aspects of OMB Circulars (A-11, A-123, A-127 and A- 129 (OMB Circulars).

• Compliance with all applicable Federal Accounting and Audit Standards (FASAB Handbook).

• Model risk management in accordance with principles and standards established by the Federal Housing Finance Agency (AB-2013-07-model-Risk-Management- Guidance) et seq. and The Federal Reserve Board and The Comptroller of the Currency (Supervisory Guidance on model Risk Management) et seq.

The services identified in this PWS will adhere to the rules, regulations, laws, standards, and conventions identified by HUD as well as within the Federal Government.

Additional constraints include the following:

• Federal Managers Financial Integrity Act of 1982 (FMFIA) -https://www.whitehouse.gov/wp-content/uploads/2018/06/a11.pdf

• Digital Accountability and Transparency Act (DATA) Schema Model/Data Act Exchange Standard website - http://fedspendingtransparency.github.io/

• Government Accountability Office (GAO) Standards for Internal Control in the Federal Government (Green Book) - http://www.gao.gov/assets/670/665712.pdf

• Improper Payments Elimination and Recovery Improvement Act of 2012 (IPERIA) -https://www.gpo.gov/fdsys/pkg/PLAW-112publ248/content-detail.html https://www.whitehouse.gov/wp-content/uploads/2018/06/a11.pdf https://obamawhitehouse.archives.gov/omb/circulars_a123_rev https://www.whitehouse.gov/wp-content/uploads/2017/11/Interim-Final-Revision-of-OMB-Circular-A-125-July11999.pdf https://obamawhitehouse.archives.gov/omb/circulars_a129_rev2013_main https://obamawhitehouse.archives.gov/omb/circulars_a129_rev2013_main https://fasab.gov/accounting-standards/document-by-chapter/ https://fasab.gov/accounting-standards/document-by-chapter/ https://www.fhfa.gov/SupervisionRegulation/AdvisoryBulletins/Pages/AB-2013-07-Model-Risk-Management-Guidance.aspx https://www.fhfa.gov/SupervisionRegulation/AdvisoryBulletins/Pages/AB-2013-07-Model-Risk-Management-Guidance.aspx

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

• Section 508 of the Rehabilitation Act of 1998 -http://www.gpo.gov/fdsys/pkg/PLAW-105publ220/pdf/PLAW-105publ220.pdf

• Office of Management and Budget (OMB) Memoranda -https://www.whitehouse.gov/omb/information-for-agencies/memoranda

• Chief Financial Officer’s (CFO) Act of 1990 – https://www.gao.gov/products/afmd-12.19.4

Compliance with IT Security Requirements - The Contractor shall maintain compliance with all current and future Federal IT security requirements for all data, databases, artifacts, processes, and procedures that the contractor manages, develops, modifies, enhances, releases, and/or upgrades. In order to do this, the Contractor shall:

• Maintain IT security and comply with all terms and conditions of the contract throughout the term of the contract with respect to all data and information technology requirements.

• Use, maintain, enhance, develop, and upgrade all information technology software and system documentation under this Contract in accordance with Federal Laws, best practices, and regulations. This includes, but is not limited to:

1. Federal Information Security Management Act - https://www.dhs.gov/fisma

2. The Privacy Act - https://www.archives.gov/about/laws/privacy-act-1974.html

3. The E-Government Act - https://www.archives.gov/about/laws/egov-act-section-

207.html

4. The Clinger-Cohen Act - https://www.fismacenter.com/Clinger%20Cohen.pdf

5. Government Paperwork Reduction Act - https://pra.digital.gov/

6. Office of Management and Budget Circulars A-130 and A-123 -https://www.whitehouse.gov/omb/information-for-agencies/circulars/

7. Office of Management and Budget Memorandum 17-12 -https://obamawhitehouse.archives.gov/sites/default/files/omb/memoranda/2017/ m-17-12_0.pdf

8. Department of Housing and Urban Development regulations, Handbooks and Policies - http://www.HUD.gov

9. GAO directives et seq – https://www.gao.gov/agencies/department-housing-and-urban-development

10. Federal Financial Management Improvement Act (FFMIA) -https://obamawhitehouse.archives.gov/omb/financial_ffs_ffmia

11. Publications from National Institute of Standards and Technology (NIST) -https://csrc.nist.gov/publications/sp

12. Federal Records and Retention Acts and Regulations, and

13. Freedom of Information Act (FOIA) Laws and Regulations

• Follow HUDs Project Planning and Management (PPM) Life Cycle and industry best practices in the analysis, design, development, testing, and implementation of proposed new systems and/or the enhancement to existing systems. This includes prohibiting live data from being used in any environment other than Production and https://obamawhitehouse.archives.gov/sites/default/files/omb/memoranda/2017/m-17-12_0.pdf https://obamawhitehouse.archives.gov/sites/default/files/omb/memoranda/2017/m-17-12_0.pdf https://csrc.nist.gov/publications/sp

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

Disaster Recovery (DR) environments. Specifically, no live data should be used in development, testing, or staging environments.

• Ensure each financial or mixed financial system that the contractor manages, develops, modifies, enhances, releases and/or upgrades is in compliance with the Federal Information System Controls Audit Manual (FISCAM) methodology that include control families for both General Computer (Security Management, Access Controls, Configuration Management, Segregation of Duties, and Contingency Planning) and Business Process Application controls (Application Security, Business Process Controls, Interfaces, and Data Management).

• Ensure compliance with identified OMB A-123 Appendix A "Management's Responsibility for Internal Control" and Appendix D "Compliance with the Federal Financial Management Improvement Act of l996 key controls.

• Maintain Security Assessment and Authorization (SA&A) and the Federal Information Security Management Act of 2002 (FISMA) standards in accordance with guidance published by the National Institute of Standards and Technology (NIST); to include the following Special Publications National Institute of Standards and Technology (NIST) Special Publication (SP):

In addition, the Contractor shall:

• Ensure business services are able to function within the Federal government’s IT protocols and requirements.

• Ensure compliance with Federal Information Processing Standards (FIPS) 199/200 Security Categorization Analysis: FIPS Requirements for Federal Info and Info Systems

• Ensure compliance with HUD OCIO Handbooks -https://www.hud.gov/program_offices/administration/hudc

• Ensure CCAP business services meet Federal Government Single Sign On requirements -

1. https://playbooks.idmanagement.gov/playbooks/

2. https://playbooks.idmanagement.gov/docs/playbook-sso.pdf

• Employ Secured Socket Layer (SSL) transmission protocol.

• Comply with NIST and FISMA standards to safeguard CCAP data that is classified as having a Moderate information security baseline.

• Support dynamic registration.

• Provide HUD with the attribute/values they need in the assertion to map to the users contained in their user store.

• Provide managed, secure, and controlled access to its application for interfacing with HUD systems and users.

• Make every reasonable effort to deliver information technology products to HUD free of known computer viruses by examining all products prior to delivery to HUD using tools and processes capable of virus detection.

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

Failure by the Contractor to adhere to the above NIST requirements could result in penalties, to include a contract performance stop-work order until compliance can be demonstrated. Disregard of these NIST requirements could also lead to other criminal, civil, administrative, or contract penalties, including, but not limited to:

• Breach of Contract damages

• False Claims Act damages

• Termination for Default

• Termination for Convenience

• Poor Past Performance

• Suspension/debarment

Compliance with Privacy Requirements - The Contractor shall maintain compliance with OMB Memorandum 17-12 (Preparing for and Responding to a Breach of Personally Identifiable Information), which requires contractors and sub-contractors (at any tier) to:

• Cooperate with and exchange information with agency officials, as determined necessary by the agency, in order to effectively report and manage a suspected or confirmed breach

• Properly encrypt PII in accordance with OMB Circular A-130 and other applicable policies and to comply with any agency-specific policies for protecting PII

• Provide and participate in mandatory training on how to identify and report a breach

• Report a suspected or confirmed breach in any medium or form, including paper, oral, and electronic, as soon as possible and without unreasonable delay, consistent with the agency's incident management policy and US-CERT notification guidelines

• Maintain capabilities to determine what Federal information was or could have been accessed and by whom, construct a timeline of user activity, determine methods and techniques used to access Federal information, and identify the initial attack vector

• Allow for an inspection, investigation, forensic analysis, and any other action necessary to ensure compliance with OMB M 17-12, the agency's breach response plan, and to assist with responding to a breach

• Identify roles and responsibilities, in accordance with OMB M 17-12 and the agency's breach response plan

• Explain that a report of a breach shall not, by itself, be interpreted as evidence that the contractor or its subcontractor (at any tier) failed to provide adequate safeguards for PII

Data Handling - The Contractor shall follow these rules when handling all data related to this requirement:

• The Contractor and its employees shall not divulge, or release data or information developed or obtained during the performance of this contract without written approval of the Contracting Officer.

• Information contained in all source documents and other media provided by HUD is the sole property of HUD.

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

• Include the following statement on deliveries of hardware, software, and all data media made set forth in this contract: "This product has been scanned for known viruses using [name of virus-screening product, including version number, if any] and is certified to be free of known viruses at the time of delivery.

• Adhere to HUDs policies for safeguarding sensitive electronically formatted information.

• Ownership: Ownership and data rights of all the elements, structures and processes feeding into or produced by the databases or other automated tools developed under this contract will be the property of the government. FHA must have effective access, through a custodian designated at FHA’s discretion, to all versions of the CCAP processes, databases, reports, data, and related documentation at the end of each business day. The Contractor is required to maintain and update the models, tools, and data in a HUD supplied secure location. As expiration of the contract approaches, the contractor must prepare and deliver all CCAP data and code to the government’s designee in a machine-readable format as agreed between the parties. The CCAP data rights should include but not be limited to all versions of the CCAP processes, databases, reports, data, and related documentation.

1.3.1 Project Planning and Management

All HUD IT projects, including all information systems acquired, developed, enhanced, or maintained shall follow the policy, procedures, standards, and guidelines set forth within the IT Management Framework using the Project Planning and Management (PPM) Life Cycle located at HUDs PPM Life Cycle Website:

http://portal.hud.gov/hudportal/HUD?src=/program_offices/cio/ppm/PPMV20HOME

PPM was designed based on the best practices from the Capability Maturity Model Integration (CMMI) for systems development and PMBOK for project management.

While at the foundation, PPM is designed as a Waterfall methodology, HUD encourages tailoring the PPM to use the many modern solution development methodologies available to enable the planning, development, and delivery of useable functionality within 6-9-month increments.

Contractors are encouraged to propose a preferred methodology whether their solution(s) are for custom development, includes prototypes or pilots, Commercial Off the Shelf (COTS)/ Government Off the Shelf (GOTS) configuration, or Software as a Services. Working with the HUD Project Manager(s), the Contractor will tailor PPM to take advantage of contractor proposed expertise in using other methodologies in a manner that will provide HUD the best value and address all of the work necessary for successful project completion, on time, within budget, and delivering intended functionality.

The decisions of PPM tailoring are captured in the Project Tailoring Agreement (PTA), which documents the specific agreement for creating, combining, referring, or omitting

Solicitation 86615723R00004 /Amendment 0001 Attachment 1 specific artifacts applicable to the project, as well as adjust project control gate reviews to be consistent with the tailoring. All tailoring of PPM must be approved by HUDs Deputy Chief Information Officer (DCIO) for Business & IT Modernization. As a default, any project without an approved project tailoring agreement is required to follow all PPM phases and artifacts as presented.

1.4 Description of Services

The Office of Housing’s Office of Risk Management and Regulatory Affairs seeks contractor support and expertise to administer, execute, enhance, and further develop Commercial Capital Assessment Projections (CCAP). The contractor shall provide the following:

1. Transition-In Services

2. CCAP Business Services

3. Data Element Management

4. Modeling Services

5. Reporting Services

6. Application Support Services

7. Testing and Validation

8. Transition Out Services

Detailed descriptions of specific tasks are provided in Section 5 Specific Tasks.

1.5 Non-Personal Services

The Government will neither supervise Contractor employees nor control the method by which the Contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual Contractor employees. It shall be the responsibility of the Contractor to manage its employees and to guard against any actions that are of the nature of personal services or give the perception of personal services.

If the Contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the Contractor's responsibility to notify the Contracting Officer (CO) immediately. These services shall not be used to perform work of a policy, decision making, or management nature, i.e., inherently Government functions. All decisions relative to programs supported by the Contactor shall be the sole responsibility of the Government.

1.6 Period of Performance

The Performance shall be a base period of 12 months with four 12-month option periods.

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

1.7 Place of Performance

The place of performance shall be at the Contractor's facilities.

1.8 Hours of Operation

The Contractor is responsible for providing services between the hours of 8:00 am to 5:00 pm ET, Monday thru Friday. The Government reserves the right to change hours of operation or restrict contractor access. Government agencies will not be available during scheduled holidays, weekends, and after duty hours. Government agencies may also not be available during periods of inclement weather in specific localities as determined by the Office of Personnel Management’s Official Operating Status found at

- https://www.opm.gov/policy-data-oversight/snow-dismissal-procedures/current-status/

The Contractor shall, at all times, maintain an adequate workforce for the uninterrupted performance of all tasks defined within the contract when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce is essential.

1.9 Post Award/Kickoff Conference

The Contractor shall attend the post award conference convened by the contracting activity or contract administration office in accordance with FAR Subpart 42.5. The Government intends to convene a Post Award Conference with the Contractor within ten business days after contract award. The Contracting Officer will notify the Contractor of the specific date, location, and agenda within five business days after contract award.

1.10 Status Meetings

The Contracting Officer, Contracting Officer’s Representative (COR) and other Government personnel, as appropriate may meet periodically with the Contractor to also review Contractor performance, requirement status, etc. At these meetings, the Contracting Officer will apprise the Contractor of how the Government views the Contractor's performance or progress of the requirement. The Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government. Post Award Conference and subsequent meetings may be held via teleconference.

1.11 Contractor Travel

Prior to travel, the Contractor shall coordinate with and receive Government authorization from the COR for all travel. Reimbursement of travel costs will be in accordance with the Federal Travel Regulation and in accordance with FAR 31.205-46.

The Contractor shall travel using the lowest cost mode transportation commensurate with the mission requirements. When necessary to use air travel, the Contractor shall https://www.opm.gov/policy-data-oversight/snow-dismissal-procedures/current-status/

Solicitation 86615723R00004 /Amendment 0001 Attachment 1 use the tourist class, economy class or similar lodging accommodations to the extent they are available and commensurate with the mission requirements. HUD will not reimburse Contractor's local travel. Local travel is defined as travel within fifty (50) miles of Washington, DC. All other travel will be reimbursed on a cost reimbursable basis; no profit or fee will be paid.

1.12 Transition-In

The Contractor shall, upon the Contracting Officer's written notice, furnish Transition-In services as required. As a successor, the Contractor shall have sufficient personnel on board during the 60-day Transition-In period to ensure a smooth transition with the incumbent Contractor. The Contractor shall provide an orderly transition of work acceptance and accomplishment such that any impact to the program is minimized.

During the Transition-In period, the Contractor shall become familiar with the requirements in order to commence full performance of services by the end of the contract Transition-In period. Transition-In is not required if the successor Contractor is the incumbent Contractor. The Contractor shall also meet with FHA stakeholders to ensure that the inventory is complete and represents all known data that is needed at contract start.

1.13 Transition-Out

To minimize any decrease in productivity and to prevent possible negative impacts on additional services, the Contractor shall have sufficient personnel on board during the 60-day Transition-Out period. The incumbent Contractor shall ensure a smooth transition with the successor Contractor during the Transition-Out period, prior to completion of contractual performance. The incumbent Contractor shall aid the successor in the development of plans, procedures, and methods for the assumption of all on going work. The Contractor shall provide an orderly transition of work acceptance and accomplishment, such that full control by the successor Contractor is achieved by the end of the new contract Transition-In period.

2 Definitions and Acronyms

2.1 Definitions

Business/Workdays - Every official workday of the week which are days between and including Monday to Friday. This does not include public holidays and weekends.

Calendar Day - Any day of the week.

Contractor - A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Contracting Officer (CO) - A person with authority to enter into, administer, and/or terminate contracts and make related determinations and findings on behalf of the Government. Note: the only individual who can legally bind the Government.

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

Contracting Officer's Representative (COR) - An employee of the U.S. Government appointed by the Contracting Officer to perform contract administration activities in regard to technical issues. This individual has authority to provide technical direction to the Contractor as long as direction is within the scope of the contract, does not constitute a change and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

Defective Service - A service output that does not meet the standard of performance associated with the Performance Work Statement.

Deliverable Anything that can be physically or electronically delivered but may include non-manufactured things such as meeting minutes or reports.

Government Furnished Property (GFP) - Government-furnished property means property in the possession of, or directly acquired by, the Government and subsequently furnished to the Contractor for performance of a contract. Government-furnished property includes, but is not limited to, spares and property furnished for repair, maintenance, overhaul, or modification. Government-furnished property also includes contractor-acquired property if the contractor-acquired property is a deliverable under a cost contract when accepted by the Government for continued use under the contract.

Performance Requirements Summary (PRS) - A listing of the performance requirements under the contract that are to be evaluated by the Government on a regular basis, performance indicators for these requirements, performance standards for these requirement and surveillance methods to be used to determine if performance standards are met.

Performance Standard - The Contractor's performance level required by the Government.

Performance Work Statement (PWS) - A statement of work for performance-based acquisitions that describes the required results in clear, specific and objective terms with measurable outcomes.

Physical Security - Actions that prevent the loss or damage of Government property.

Quality Assurance (QA) - Policies and procedures adopted by the Government to ensure that supplies and services acquired under Government contracts conform to the contracts quality requirements.

Quality Assurance Surveillance Plan (QASP) - A plan describing how the agency will survey, observe, test, sample, evaluate and document the Contractor's performance in meeting critical performance standards identified in the contract.

Quality Control (QC) - All necessary measures taken by the Contractor to assure that the quality of an end product of service shall meet contract requirements.

Service Contract - A contract that directly engages the time and effort of a Contractor whose primary purpose is to perform an identifiable task rather than to furnish an end item of supply.

Subcontractor - Any person, other than the prime Contractor, who offers to furnish or furnishes any supplies, material, equipment, or services of any kind under a prime contract or a subcontract entered into in connection with such prime contract, and any person who offers to furnish or furnishes general supplies to the prime contractor or a

Solicitation 86615723R00004 /Amendment 0001 Attachment 1 higher tier subcontractor. The Government does not have privity of contract with a subcontractor.

System Security Administrator (SSA) - The Government staff person who approves access to individual systems or applications.

Work Week - Monday through Friday, unless specified otherwise.

2.2 Acronyms

AQL - Acceptable Quality Level ARAMS - Automated Renewal and Amendment System BAA - Business Area Analysis Study CBT - Computer-Based Training CCB - Change Control Board CCMB - Configuration Change Management Board CMMI - Capability Maturity Model Integration CFO or OCFO - Office of the Chief Financial Officer of HUD CFR - Code of Federal Regulations CIO or OCIO - Office of the Chief Information Officer of HUD CO - Contracting Officer COR - Contracting Officer's Representative COR - Contracting Officer Representative COTS - Commercial Off-the-Shelf CPO - Office of the Chief Procurement Officer of HUD EST - Eastern Standard Time (U.S.)

ETC - Estimate to Completion GI/SRI - General Insurance/Special Risk Insurance GAO - U.S. General Accounting Office HUD - U.S. Department of Housing and Urban Development HUDAR - HUD Acquisition Regulation HUD/ISG - Internet Services Group within the Telecom Processing Division HUD Web - HUDs Intranet Web Site and related WEB pages.

IG or OIG - Inspector General (Office of) IT - Information Technology IV&V - Independent Validation and Verification LOCCS - Line of Credit Control System MMIF - Mutual Mortgage Insurance Fund OCPO - Office of the Chief Procurement Officer OIG - Office of Inspector General OMB - Office of Management and Budget PL Public Law PM - Project Manager POC - Point of Contact PPM - Project Planning and Management QA - Quality Assurance

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

QASP - Quality Assurance Surveillance Plan QCP - Quality Control Plan SSA - System Security Administrator SF - Standard Form TBD - To be determined U.S.C - United States Code

3 Government-Furnished Property and Services

The Contractor shall ensure accurate control and accountability of all Government- Furnished Property in accordance with the terms and conditions of this contract. The Government will furnish, at no cost to the Contractor, the GFP shown below.

3.1 Government Services

N/A

3.2 Facilities

N/A

3.3 Equipment

The Government will provide PIV-card enabled laptops with standard HUD software for Contractor staff to perform work under this contract. The Contractor shall ensure that each staff member for whom a laptop is requested has completed and returned all required NDA, PIV and Rules of Behavior documents to the COR and has been provided with a Security Advice Notice (SAN) and a Grid Card. The Contractor shall ensure return of HUD-owned equipment upon each staff member’s leaving the contract as each laptop is imaged for that individual. Once the Contractor staff person has been issued a “C ID” (done when the HUD Security process is completed), the Government will provide contractor staff with access to any HUD systems needed to perform work under this contract.

3.4 Materials

The Government will provide copies of required materials to the Contractor digitally, in hard copy, or soft copy. All materials will remain the property of the Government and will be returned to the COR upon request or at the end of the contract period.

3.5 Quality Assurance (QA)

The Government shall evaluate the Contractor's performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government will do to ensure that the Contractor has performed in accordance with performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable quality level.

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

4 Contractor-Furnished Items and Services

The Contractor shall furnish, all facilities, equipment, and supplies required to perform the work under this contract that are not listed under Government-Furnished Property and Services.

4.1 Facilities

The Contractor shall furnish the facilities necessary to complete the requirements of this

PWS.

4.2 Equipment

The Contractor shall furnish all equipment and supplies required to perform the work under this contract, except as noted above under Government Furnished Equipment.

4.3 Material

The Contractor shall furnish the materials not provided by the Government necessary to complete the requirements of this PWS.

4.4 Contractor Responsibilities

The Contractor shall only conduct business with designated Government personnel listed as points of contact (POCs). Names of authorized personnel shall be provided to the Contractor by the Government, in writing, and updated as necessary throughout the contract period. The Contractor shall also ensure that all employees who are to have access to the CCAP application and data return their non-disclosure agreements and PIV forms to the Contracting Officer and receive a Security Advice Notice (SAN) prior to being granted that access.

U.S. Government records, copies of original results and reports, verified original data, corrected data, and corrected supporting final reports that are maintained by the Contractor remain the property of the U.S. Government. These files/results must be surrendered to the COR upon request and at the end of the contract.

4.5 Contractor Personnel

The Contractor shall provide a Project Manager who shall be responsible for the performance of work. An alternate shall also be designated to act in the absence of the Project Manager. These Contractor personnel are considered Key Personnel by the Government and shall be listed as such in accordance with HUDAR 2452.237-70, "Key Personnel. The Project Manager and alternate shall have full authority to act on all contract matters relating to daily operations of this contract. Accordingly, at a minimum, the points of contact shall have the technical knowledge of the requirement and be in the position to actually receive assignment, guidance, and direction from the COR, PM and CO per HUDAR 2452.237-73, "Conduct of Work and Technical Guidance" and shall

Solicitation 86615723R00004 /Amendment 0001 Attachment 1 be allocated enough hours to the requirement to ensure successful performance. These points of contact shall each be an employee of the Contractor. An employee of a subcontractor is not acceptable for either of these positions. The Project Manager or alternate shall be available between the hours of 8:00am to 5:00pm Monday through Friday ET, except Federal Holidays or when the Government facility is closed during periods of inclement weather in specific localities as determined by the Office of Personnel Management’s Official Operating Status found at -

4.5.1 Special Qualifications

The Contractor shall employ a sufficient number of experienced staff dedicated to this contract with technical capabilities to complete the deliverables in a timely, accurate, and concise manner, as set forth in the performance work statement.

The Contractor’s staff shall possess professional knowledge of Credit Reform Act accounting; financial transaction analysis and business intelligence methods, practices, and software; credit subsidy and subsidy re-estimates formulation, economic modeling, and software; budget execution; internal controls; Federal information technology security standards; and experience with associated software and programming languages. Specific knowledge of the mortgage loan generation and guaranty processes; FHA commercial loan risk category budgetary and operational risks; and data warehousing structures, cloud-based storage and SAS Viya operations are also required.

Key personnel shall be identified by name and resume in the proposal and include:

a. Project Manager

b. Assistant Project Manager

c. Lead Modeler

d. Database Administrator

e. SAS EG and Viya Support Lead

Key contractor personnel shall have relevant skills and experience as follows:

a. Project Manager

Minimum of ten years of demonstrated experience in the ability to: apply fundamental and diversified professional technical concepts, theories and practices to achieve management and technical objectives with versatility, judgment and perception; adapt and apply methods and techniques of related scientific disciplines; and organize, analyze, interpret and evaluate, and evaluate data in the solution of technical problems.

PMP or similar certification.

b. Assistant Project Manager

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

Minimum of seven years of demonstrated experience in the ability to: apply fundamental and diversified professional technical concepts, theories and practices to achieve management and technical objectives with versatility, judgment and perception; adapt and apply methods and techniques of related scientific disciplines; and organize, analyze, interpret, and evaluate data in the solution of technical problems.

Demonstrable experience with policy analysis, data analysis, trend analysis and data modeling using large and complex data sets.

The Project Manager and Assistant Project Manager should also be able to provide demonstrated experience as Subject Matter Experts in the Multi-Family and Healthcare industry as follows: Multifamily, Nursing Home, and Hospital housing/healthcare finance industry practitioner, with expertise in all of housing/healthcare finance’s related disciplines: loan origination, servicing, primary and secondary market activities; project and institutional risk management; real estate based lending; credit underwriting;

portfolio supervision; regulatory work in specialized, commercial lending institutions, capital markets operations, and securitization.

c. Lead Modeler

Master's degree or PHD in economics, finance, statistics or mathematics and expert Statistical Analysis System (SAS) experience necessary. Must possess a background in statistics, analytics, data mining, and visualization, and demonstrated experience building a default model and early warning tool to assess portfolio and loan-level risk.

d. Database Administrator

Demonstrated experience in: the development and management of Oracle, SQL, SAS, and cloud-based databases; creation and maintenance of Extraction, Transformation, and Loading (ETL) tools to import data from multiple data sources and systems, using various file delivery media; and familiarity and experience with cloud technologies such as Microsoft Azure and Amazon AWS, etc.

e. SAS EG and Viya Support Lead

Demonstrated experience developing SAS Viya Business Intelligence reports in Visual Analytics; creating and maintaining SAS metadata; and developing and coding projects in SAS Viya cloud computing environment using CAS libraries. Experience in application of SAS patches and upgrades preferred but not required.

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

Key staff are required to possess these special qualifications. Should there be a change in key personnel during the contractual relationship, the Contractor shall guarantee that the replacement shall meet or exceed the capabilities required to accomplish the tasks set forth in this contract, and the change must be approved by HUD.

At the Contractor's discretion, more than one of the skill sets listed may be filled by one person; however, if that person leaves the contract, all skill sets possessed by that person must be replaced. The Contractor shall immediately notify the COR upon termination of any employee with security access to HUD systems.

Key personnel criteria are the extent to which the offeror identifies the professional staff to be assigned to the tasks required in the Performance Work Statement and shows how the skills, knowledge, training, and experience of these persons relate specifically to the work to be undertaken. Provide an explanation of the organization of the team or teams which will conduct the work, which persons would be assigned lead responsibility for specific tasks, and a description of the experience and knowledge of each person on the team shall be provided along with resumes of all key personnel. Identify how each person would be classified in accordance with the staffing level requirements.

The Contractor shall also ensure that sufficient staff are available to provide the same level of support in the event that a key staff member will be out of the office for more than one week:

Key Personnel must possess the following expertise:

1. SAS software - experience should include, but is not limited to Base SAS, Stat

Graph, SAS Interface to database and PC file formats, SAS ETS (econometric, time series and forecasting techniques), and SAS Enterprise Guide.

2. Cloud-based SAS Viya and SAS Visual Statistics - experience should include Business Intelligence web report development and deployment into a production environment.

3. Cloud computing environments such as Microsoft Azure or AWS - experience should include deploying a cloud enabled ETL (Extract, Transform & Load) solution as a database administrator with Agile and Scrum certifications.

4. Professional modelling using various advanced statistical techniques, such as multiple variable logistic regression, random forest, OLS (Ordinary Least Squares) multiple regression, stepwise regression, and ridge or lasso regression - experience should include a strong background in credit risk scoring and deployment of multiple models in a production environment.

5. C#, Python, and some Java Coding

6. Advanced data processing (ability to avoid overfitting, underfitting, and explaining in a clear concise visual way the accuracy, benefits, and drawbacks of various models and the intuition behind such models)

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

7. Commercial real estate to include a combination of either Multi-Family, Residential Care, or Hospital portfolios - experience should include working with the various HUD-insured and non-insured portfolios that include Multi-Family, Residential Care, and Hospitals.

4.6 Identification of Contractor Employees

All Contractor/subcontractor personnel shall wear company picture identification badges as to distinguish themselves from Government employees. When conversing with Government personnel during business meetings, over the telephone, or via electronic mail, Contractor/subcontractor personnel shall identify themselves as such to avoid situations arising where sensitive topics might be better discussed solely between Government employees. Contractors/subcontractors shall identify themselves on any attendance sheet or any coordination documents they may review. Electronic mail signature blocks shall identify their company affiliation. Where practicable, Contractor/subcontractors occupying collocated space with their Government program customer shall identify their workspace area with their name and company affiliation, or at a minimum, "Contractor" after name." after name.

4.7 Quality Control

The Contractor shall establish and maintain a complete quality control program that shall ensure services are performed in accordance with this contract. The Contractor shall develop and implement procedures to identify, prevent, and ensure non reoccurrence of defective services. The Contractor's quality control program is the means by which they assure themselves that their work complies with the requirements of the contract. The Contractor shall provide the associated Quality Control Plan to the Government as directed.

4.7.1 Quality Control Plan

The Contractor's QCP shall be delivered to the COR within 30 days after contract award. The QCP shall be submitted to the COR within 10 business days when changes are made thereafter. After acceptance of the QCP, the Contractor shall receive the Contracting Officer's Representative acceptance in writing of any proposed change to its quality control system. The Contractor shall develop, maintain, and enforce the Quality Control Plan (QCP).

The QCP shall:

• Ensure the Government receives a level of quality that is consistent with the requirements specified in this contract.

• Be sufficiently detailed to provide the Contractor's methodology for identifying and recruiting qualified personnel.

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

• Provide the Contractor's methodology for resolving problems identified by the Government during reviews conducted in accordance with its Quality Assurance Surveillance Plan (QASP)

• Provide the Contractor's methodology for establishing an internal feedback system for support personnel, and for resolving problems identified by that feedback system.

• Demonstrate and validate that the services or deliverables to be provided under the contract are completed with a level of quality that meets the minimum performance threshold established in the Government's QASP.

5 Specific Tasks

This section describes specific tasks that shall be accomplished during the performance of the contract.

5.1 Task One – Transition-In Services (If Applicable)

The first 60 calendar days of the base year will allow the Contractor to transition in and shall include the refining of operational support functions and "ramp up” of staff to perform the tasks outlined within Section 5 Specific Tasks. During the Transition period, the Contractor shall attend post award and other meetings with HUD to ensure smooth transition, as applicable.

The Contractor shall provide a Transition-In Plan to the COR within 5 business days of contract award that details the tasks required to onboard staff and perform Transition-In Services. The Contractor shall provide changes to the Transition-In Plan within 5 business days of Government comment. The Contractor shall perform Transition-In Services and be ready for full assumption of all CCAP/OPIIS services detailed herein within 60 calendar days of contract award.

The Transition-In Plan shall include key interface points and midstream events such as interface testing to ensure the environment can receive and process inputs from the various data sources processed by CCAP.

The Contractor shall have sufficient personnel on board during the 60-day transition period to ensure that a seamless, logical, error-free, and efficient transition of support activities from the incumbent’s platform to the Contractor’s environment is achieved with no decrease in productivity or negative impacts on processing or services.

The Contractor shall perform the following Transition-In Services:

1. Establish its physical infrastructure; ensure that a qualified and trained workforce of employees or subcontractors is in place; obtain all licenses, permits, bonds and qualifications required to transact the business required in this PWS; and implement the information technology and support necessary to perform the requirements contained in this PWS.

Solicitation 86615723R00004 /Amendment 0001 Attachment 1

2. Demonstrate its operational readiness to commence full performance of the tasks described in Section 5.2 CCAP Business Services.

3. Attend any required training provided by HUD and the former Contractor.

4. Provide support for existing OPIIS functions as described in Section 5.6 OPIIS

Services.

5. Coordinate and work with the COR and other various HUD staff, contractors, and government agencies to ensure proper and effective assumption of CCAP support services and functional capabilities.

6. Ensure that all employees who are to have access to the CCAP application and data return their non-disclosure agreements and PIV forms to the Contracting Officer and receive a Security Advice Notice (SAN) prior to being granted that access.

7. Further analyze requirements for complete system support and…