Attachment A- Draft PWS- Global Market Advisory and Investors Analytics 7.8.26.pdf

1 September 2024

Performance Work Statement (PWS)

Global Market Advisory and Investors Analytics (GMAIA)

Support Services

July 08, 2026

2 September 2024

Table of Contents

Vision Statement

1 General Information

1.1 Scope of Work

1.2 Background

1.3 Constraints

1.4 Non-Personal Services

1.5 Period of Performance

1.6 Place of Performance

1.7 Hours of Operation

1.8 Special Qualifications

1.9 Post Award/Kickoff Conference

1.10 Status Meetings

1.11 Contractor Travel

1.12 Transition In

1.13 Transition Out

2 Definitions and Acronyms

2.1 Definitions

2.2 Acronyms

3 Government-Furnished Property and Services

3.1 Government Services

3.2 Facilities

3.3 Equipment

3.4 Materials and Information

3.5 Quality Assurance (QA)

4 Contractor-Furnished Items and Services

3 September 2024

4.1 Facilities

4.2 Equipment

4.3 Materials

4.4 Contractor Responsibilities

4.5 Contractor Personnel

4.6 Identification of Contractor Employees

5 Specific Task

5.1 Project Management

5.1.1 Post Award Kick-off Meeting

5.1.2 Transition-In

5.1.3 Project Management Plan

5.1.4 Monthly Status Reporting (MSR)

5.2 Global Engagement Advisory Services…………………………………………………………..19

5.3 Global Markets Analysis - Data Analytics and Intelligence Services………………………….21

5.4 Develop Ginnie Mae Global Institute……………………………………………………………..22

5.5 Global Investor Profiling and Databases…………………………………………………………23

5.6 Agency MBS Global Competitive Landscape……………………………………………………24

5.7 Quantify GNMA MBS Value Proposition, Risk-Adjusted Return and Pricing Drivers………25

5.8 Analytics of MBS Index, Exchange Traded Funds (ETFs) and other Investment products..26

5.9 Data Driven Housing Finance Policy Impact Evaluation

5.10 Market Intelligence Update Report

5.10.1 Weekly Market Analytics Report

5.10.2 Ad Hoc Analyses

5.11 Global Engagement of Official Institutions Strategies…………………………………………29

5.11.1 Engagement Formats and Tasks

5.11.2 Inter-Agency Multidisciplinary Working Group

4 September 2024

5.12 Regional Operation and Management Plan

5.13 Transaction-out

6 Deliverables

6.1 Quality Control Plan

6.2 Acceptance Criteria

7 Related Documents

8 Performance Requirements Summary……………………………………………………………36

5 September 2024

Performance Work Statement (PWS)

Global Market Advisory and Investors Analytics Services

Vision Statement To improve efficiency and expand resources for linking the United States housing market to the global capital markets, thus providing low-cost financing for federal housing programs

1 General Information

1.1 Scope of Work

Ginnie Mae, Office of Capital Markets (OCM), is seeking global market advisory and mortgage analytics contractor support services to improve Ginnie Mae’s understanding of the global marketplace, product competitiveness, while generating incremental demand from net new global investors.

Services include:

• Project Management

• Global Engagement and Advisory Services

• Global Markets Analysis - Data Analytics and Intelligence Services

• Develop Ginnie Mae Global Institute

• Global Investor Profiling and Database

• Agency MBS Global Competitive Landscape

• Quantify GNMA MBS Value Proposition

• Analytics of MBS Index

• Data Driven Housing Finance Policy Impact Evaluation

• Market Intelligence Update

• Global Engagement of Official Institutions Strategies

• Regional Operation and Management Plan

• Transition Out

Description of Services (Detailed descriptions of specific tasks are provided in Section 5 – Specific Tasks)

1.2 Background

The current administration at Ginnie Mae is taking on a renewed focus on economic security as national security issue and understands Ginnie Mae Mortgage-Backed Securities (MBS) as a part of a larger umbrella. As such Ginnie Mae MBS must remain globally and domestically competitive to attract investors around the world. This mission critical project can enhance Ginnie Mae MBS’ value proposition, quality and uniqueness as a low-risk and high return investment destination for global investors.

Due to new challenges in the global community Ginnie Mae has identified additional needs to address global financial changes as a full range of advisory and analytics services to Ginnie Mae to assist Ginnie Mae accomplishing the agency’s mission and support the objectives of the Global Investor Relations program. The Contractor is responsible for advising Ginnie Mae on all fluctuations affecting the global Agency MBS market which could have implications for Ginnie Mae’s portfolio of $3 trillion, holdings of which are invested by hundreds of institutions in the U.S. and worldwide.

6 September 2024

The contract will support the Office of Capital Markets which interact closely with all offices within the agency which has 220 staff members with professional background of financial services, securities exchange, accounting, cybersecurity, and international collaboration.

The contract is needed to assist Ginnie Mae in developing and implementing an analytical framework as a reference guide for Ginnie Mae policy making long term and innovative investors engagement strategies while remaining responsive to the increasingly competitive international sovereign bond and Cryptocurrency markets.

1.3 Constraints

The services identified in this PWS will adhere to the rules, regulations, laws, standards, and conventions identified by HUD as well as within the Federal Government. Constraints include the following:

• Document Number

Title & URL Release d

Mandator y/

Advisory

Executive Order (E.O.) 14028 and OMB Circular M- 22-09

Improving Nation’s Cybersecurity Executive Order on Improving the Nation's Cybersecurity | The White House Moving the U.S. Government Toward Zero Trust Cybersecurity Principles M-22-09 Federal Zero Trust Strategy (whitehouse.gov)

2021, M

44 USC §3541 et seq., OMB Circular M-19-2

Federal Information Security Management Act of 2014 (FISMA, supersedes the Computer Security Act of 1987) USCODE-2016-title44-chap35.pdf (govinfo.gov) M-19-02.pdf (whitehouse.gov)

2002 M

Pub. L. No. 113- 291, OMB Circular M-15-14

Federal Information Technology Acquisition Reform Act (FITARA), of December 2014 Management and Oversight of Federal Information Technology (archives.gov)

2014 M

44 USC §3601 et seq.

E-Government Act of 2002 (Pub. L. No. 107-347) https://www.govinfo.gov/content/pkg/USCODE-2019-title44/pdf/USCODE-2019-title44-chap36-sec3601.pdf

2002 M

31 USC §1101

Good Accounting Obligations in Government Act (AGO-IC Act), 2019 (formally known as Government Performance and Results Act or GPRA), Pub. L. No.

115-414.

https://www.govinfo.gov/content/pkg/USCODE-2019-title31/pdf/USCODE-2019-title31-subtitleII-chap11-sec1101.pdf

2019 M

Pub. L. No. 104-

106, 40 USC

§1401 et seq.

Information Technology Management Reform Act of 1996 (Clinger-Cohen Act) https://dodcio.defense.gov/Portals/0/Documents/ciode srefvolone.pdf

1996 M https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/ https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/ https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf https://www.whitehouse.gov/wp-content/uploads/2018/10/M-19-02.pdf https://obamawhitehouse.archives.gov/sites/default/files/omb/memoranda/2015/m-15-14.pdf https://obamawhitehouse.archives.gov/sites/default/files/omb/memoranda/2015/m-15-14.pdf https://www.govinfo.gov/content/pkg/USCODE-2019-title44/pdf/USCODE-2019-title44-chap36-sec3601.pdf https://www.govinfo.gov/content/pkg/USCODE-2019-title44/pdf/USCODE-2019-title44-chap36-sec3601.pdf https://www.govinfo.gov/content/pkg/USCODE-2019-title31/pdf/USCODE-2019-title31-subtitleII-chap11-sec1101.pdf https://www.govinfo.gov/content/pkg/USCODE-2019-title31/pdf/USCODE-2019-title31-subtitleII-chap11-sec1101.pdf https://www.govinfo.gov/content/pkg/USCODE-2019-title31/pdf/USCODE-2019-title31-subtitleII-chap11-sec1101.pdf https://dodcio.defense.gov/Portals/0/Documents/ciodesrefvolone.pdf https://dodcio.defense.gov/Portals/0/Documents/ciodesrefvolone.pdf

7 September 2024

Title & URL Release d

Mandator y/

Advisory Pub. L. No. 105-

220, 29 USC

701 et seq.

Section 508 of the Rehabilitation Act of 1998 https://www.section508.gov/manage/laws-and-policies/#508-policy

1998 M

Pub. L. No. 113-

101, 31 USC

§3716(c)(6)

Digital and Transparency Act of 2014 (DATA Act) https://www.govinfo.gov/content/pkg/PLAW- 113publ101/pdf/PLAW-113publ101.pdf

2014 M

5 CFR Part 1315 Prompt Payment; Final Rule https://www.fiscal.treasury.gov/files/prompt-payment/5cfr1315.pdf

M

OMB Circular A-16 Coordination of Geographic Information and Related Spatial Data Activities https://www.whitehouse.gov/omb/circulars

2002 M

OMB Circular A- 123, Appendix D

Compliance with the Federal Financial Management Improvement Act https://www.whitehouse.gov/omb/circulars

Latest version

M

OMB Circular A-

Managing Information as a Strategic Resource https://www.whitehouse.gov/omb/circulars

Latest version

M

OMB Memorandum 96-20

Implementation of the Information Technology Management Reform Act of 1996 https://www.whitehouse.gov/wp-content/uploads/2017/11/1996-M-96-20- Implementation-of-the-Information-Technology- Management-Reform-Act-of-1996.pdf

Latest version

M

OMB Memorandum 99-20

Security of Federal Automated Information Resources https://obamawhitehouse.archives.gov/omb/memorand a_m99-20/

1999 M

OMB Memorandum 06-15

Safeguarding Personally identifiable Information https://obamawhitehouse.archives.gov/sites/default/file s/omb/assets/omb/memoranda/fy2006/m-06-15.pdf

2006 M

OMB Memorandum 06-16

Protection of Sensitive Agency Information https://www.whitehouse.gov/wp-content/uploads/legacy_drupal_files/omb/memoranda/ 2006/m06-16.pdf

2006 M

OMB Memorandum 06-19

Reporting Incidents Involving PII https://georgewbush-whitehouse.archives.gov/omb/memoranda/fy2006/m06 -19.pdf

2006 M

OMB Memorandum 06-20

Reporting Instructions for the Federal Information Security Act and Agency Privacy Management https://www.whitehouse.gov/wp-content/uploads/legacy_drupal_files/omb/memoranda/ 2006/m06-20.pdf

2006 M

OMB Memorandum 12-11

Reducing Improper Payments through the "Do Not Pay List" https://www.whitehouse.gov/wp-content/uploads/legacy_drupal_files/omb/memoranda/ 2012/m-12-11_1.pdf

2012 M https://www.govinfo.gov/content/pkg/PLAW-113publ101/pdf/PLAW-113publ101.pdf https://www.govinfo.gov/content/pkg/PLAW-113publ101/pdf/PLAW-113publ101.pdf https://www.fiscal.treasury.gov/files/prompt-payment/5cfr1315.pdf https://www.fiscal.treasury.gov/files/prompt-payment/5cfr1315.pdf https://www.whitehouse.gov/omb/circulars https://www.whitehouse.gov/omb/circulars https://www.whitehouse.gov/omb/circulars https://www.whitehouse.gov/wp-content/uploads/2017/11/1996-M-96-20-Implementation-of-the-Information-Technology-Management-Reform-Act-of-1996.pdf https://www.whitehouse.gov/wp-content/uploads/2017/11/1996-M-96-20-Implementation-of-the-Information-Technology-Management-Reform-Act-of-1996.pdf https://www.whitehouse.gov/wp-content/uploads/2017/11/1996-M-96-20-Implementation-of-the-Information-Technology-Management-Reform-Act-of-1996.pdf https://www.whitehouse.gov/wp-content/uploads/2017/11/1996-M-96-20-Implementation-of-the-Information-Technology-Management-Reform-Act-of-1996.pdf https://obamawhitehouse.archives.gov/omb/memoranda_m99-20/ https://obamawhitehouse.archives.gov/omb/memoranda_m99-20/ https://obamawhitehouse.archives.gov/sites/default/files/omb/assets/omb/memoranda/fy2006/m-06-15.pdf https://obamawhitehouse.archives.gov/sites/default/files/omb/assets/omb/memoranda/fy2006/m-06-15.pdf

8 September 2024

Title & URL Release d

Mandator y/

Advisory

PDD-63

Critical Infrastructure Protection, Presidential Decision Directive-63 https://irp.fas.org/offdocs/pdd/pdd-63.htm

1998 M

HSPD-12

Policy for a Common Identification Standard for Federal Employees and Contractors, Homeland Security Presidential Directive-12 https://www.dhs.gov/homeland-security-presidential-directive-12

2004 M

NIST Special Publication 800-12, Series

An Introduction to Computer Security: The NIST Handbook https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

M

NIST Special Publication 800- 14, Series

Generally Accepted Principles and Practices for Securing Information Technology Systems https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

M

NIST Special Publication 800-18, Series

Guide for Developing Security Plans for Federal Information Systems https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

A

NIST Special Publication 800-30, Series

Guide for Conducting Risk Assessments https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

M

NIST Special Publication 800-34, Series

Contingency Planning Guide for Information Technology Systems https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

M

NIST Special Publication 800-35, Series

Guide to Information Technology Security Services https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

M

NIST Special Publication 800- 37, Series

Guide for the Security Certification and Accreditation of Federal Information Systems https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

M

NIST Special Publication 800-47 Series

Security Guide for Interconnecting Information Technology Systems https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

A https://irp.fas.org/offdocs/pdd/pdd-63.htm http://www.dhs.gov/homeland-security-presidential-directive-12 http://www.dhs.gov/homeland-security-presidential-directive-12 https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html

9 September 2024

Title & URL Release d

Mandator y/

Advisory NIST Special Publication 800-53, Series

Security and Privacy Controls for Federal Information Systems and Organizations https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

A

NIST Special Publication 800- 53A, Series

Guide for Assessing the Security Controls in Federal Information Systems and Organizations https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

A

NIST Special Publication 800-55, Series

Performance Measurement Guide for Information Security https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

A

NIST Special Publication 800-60, Series

Guide for Mapping Types of Information and Information Systems to Security Categories (Appendices) https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

A

NIST Special Publication 800-64, Series

Security Considerations in the Information System Development Life Cycle https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

A

NIST Draft Special Publication 800-82, Series

Guide to Industrial Control Systems (ICS) Security https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

A

NIST Special Publication 800-84, Series

Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

A

NIST Special Publication 800- 100, Series

Information Security Handbook: A Guide for Managers https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

A

NIST Special Publication 800- 119, Series

Guidelines for the Secure Deployment of IPv6 https://csrc.nist.gov/publications/PubsSPs.html SP 800 Series is available at:

https://csrc.nist.gov/publications/sp800

Latest Version

A

HUD Handbook 1325.1

Privacy Act Handbook https://www.hud.gov/program_offices/administration/h udclips/handbooks/admh

Latest Version

M https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://csrc.nist.gov/publications/PubsSPs.html https://www.hud.gov/program_offices/administration/hudclips/handbooks/admh https://www.hud.gov/program_offices/administration/hudclips/handbooks/admh

10 September 2024

Title & URL Release d

Mandator y/

Advisory HUD Handbook 2400.25

Information Technology Security Policy https://www.hud.gov/program_offices/admini stration/hudclips/handbooks/cio

Latest Version

M

HUD Handbook 3255.1

Enterprise Architecture Policy https://www.hud.gov/program_offices/admini stration/hudclips/handbooks/cio

Latest Version

M

HUD Handbook 3410.1

HUD Policy for IT Project Planning and Management

(PPM 2.0)

https://www.hud.gov/program_offices/admini stration/hudclips/handbooks/cio

Latest Version

M

HUD PPM 2.0 HUD Project Planning and Management (PPM) Site:

Project Type Guides, Modules and Artifact Templates Project Planning and Management V2.0 Home Page | HUD.gov / U.S. Department of Housing and Urban Development (HUD)

Latest Versions

M

HUD Handbook 3430.1

HUD Policy for Agile Methodology https://www.hud.gov/program_offices/administration/ hudclips/handbooks/cio

Latest Version

M

NDIA IPMD EIA-

National Defense Industrial Association (NDIA) American National Standards Institute Electronic Industries Alliance (ANSI/EIA) - 748 standards for Earned Value Management Systems (EVMS) NDIA IPMD EIA-748 EVMS Intent GuideNDIA IPMD EIA-748 EVMS Intent Guide

2018 A

1.4 Non-Personal Services

The Government will neither supervise Contractor employees nor control the method by which the Contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual Contractor employees. It shall be the responsibility of the Contractor to manage its employees and to guard against any actions that are of the nature of personal services or give the perception of personal services.

If the Contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the Contractor's responsibility to notify the Contracting Officer (CO) immediately. These services shall not be used to perform work of a policy, decision making or management nature, i.e., inherently Government functions. All decisions relative to programs supported by the Contactor shall be the sole responsibility of the Government.

1.5 Period of Performance

The period of performance shall be for one 12- month base period and four (4) 12-month option periods.

1.6 Place of Performance

The services to be performed under this contract shall be performed at the Contractor’s facilities.

https://www.hud.gov/program_offices/administration/hudclips/handbooks/cio https://www.hud.gov/program_offices/administration/hudclips/handbooks/cio https://www.hud.gov/program_offices/administration/hudclips/handbooks/cio https://www.hud.gov/program_offices/administration/hudclips/handbooks/cio https://www.hud.gov/program_offices/administration/hudclips/handbooks/cio https://www.hud.gov/program_offices/administration/hudclips/handbooks/cio https://www.hud.gov/program_offices/cio/ppm/PPMV20HOME https://www.hud.gov/program_offices/cio/ppm/PPMV20HOME https://www.hud.gov/program_offices/cio/ppm/PPMV20HOME https://www.hud.gov/program_offices/administration/hudclips/handbooks/cio https://www.hud.gov/program_offices/administration/hudclips/handbooks/cio https://www.ndia.org/-/media/sites/ndia/divisions/ipmd/division-guides-and-resources/ndia_ipmd_intent_guide_ver_d_aug282018.ashx https://www.ndia.org/-/media/sites/ndia/divisions/ipmd/division-guides-and-resources/ndia_ipmd_intent_guide_ver_d_aug282018.ashx https://www.ndia.org/-/media/sites/ndia/divisions/ipmd/division-guides-and-resources/ndia_ipmd_intent_guide_ver_d_aug282018.ashx

11 September 2024

1.7 Hours of Operation

The Contractor is responsible for providing services between the hours of 8 a.m to 5 p.m eastern Monday thru Friday except for Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closing, or similar Government directed facility closings. The Government reserves the right to change hours of operation or restrict contractor access. Government agencies will not be available during scheduled holidays, inclement weather, weekends, and after duty hours.

The Contractor shall maintain an adequate workforce for the uninterrupted performance of all tasks defined within the contract when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce is essential.

1.8 Special Qualifications

N/A

1.9 Post Award/Kickoff Conference

The Contractor shall attend any post award conference convened by the contracting activity or contract administration office in accordance HUD Acquisition Regulation (HUDAR) clause 2452.237-79 - Post Award Conference.

1.10 Status Meetings

The Contracting Officer, Contracting Officer’s Representative (COR), and other Government personnel, as appropriate, may meet periodically with the Contractor to also review Contractor performance, requirement status, etc. At these meetings, the Contracting Officer will apprise the Contractor of how the Government views the Contractor's performance or progress of the requirement. The Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government. Post Award Conference and subsequent meetings may be held via teleconference at the Contracting Officer's discretion.

1.11 Contractor Travel

Prior to travel, the Contractor shall coordinate with and receive Government authorization from the COR for all travel. Reimbursement of travel costs will be in accordance with the Federal Travel Regulation and in accordance with FAR 31.205-46.

1.12 Transition-In

The Contractor shall, upon the Contracting Officer's written notice, furnish transition-in services as required. As a successor, the Contractor shall have sufficient personnel on board during the 90 calendar days transition-in period to ensure a smooth transition with the incumbent Contractor. The Contractor shall provide an orderly transition of work acceptance and accomplishment such that any impact to the program is minimized. During the transition-in period, the Contractor shall become familiar with the requirements in order to commence full performance of services by the end of the contract transition-in period. Transition-in is not required if the successor Contractor is the incumbent Contractor.

1.13 Transition-Out

To minimize any decrease in productivity and to prevent possible negative impacts on additional services, the Contractor shall have sufficient personnel on board during the 90 calendar days transition-out period. The incumbent Contractor shall ensure a smooth transition with the successor contractor during the transition-out period, prior to completion of Contract

12 September 2024 performance. The incumbent Contractor shall aid the successor in the development of plans, procedures, and methods for the assumption of all on going work. The Contractor shall provide an orderly transition of work acceptance and accomplishment, such that full control by the successor contractor is achieved by the end of the new contract transition-in period.

2 Definitions and Acronyms

2.1 Definitions

Business Day – Every official day of the week which are days between and including Monday to Friday. This does not include federal holidays and weekends.

Contractor - A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Contracting Officer (CO) - A person with authority to enter into, administer, and/or terminate contracts and make related determinations and findings on behalf of the Government. Note: the only individual who can legally bind the Government.

Contracting Officer’s Representative (COR) – An employee of the U.S. Government appointed by the Contracting Officer to perform contract administration activities regarding technical issues. This individual has authority to provide technical directions to the Contractor if direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have the authority to change the terms and conditions of the contract.

Defective Service - A service output that does not meet the standard of performance associated with the Performance Work Statement.

Deliverable - Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

Government Furnished Property (GFP) - Government-furnished property is property in the possession of, or directly acquired by, the Government and subsequently furnished to the Contractor for performance of a contract. Government-furnished property includes, but is not limited to, spares and property furnished for repair, maintenance, overhaul, or modification.

Government-furnished property also includes contractor-acquired property if the contractor-acquired property is a deliverable under a cost contract when accepted by the Government for continued use under the contract.

Performance Standard - The Contractor’s performance level required by the Government.

Performance Work Statement (PWS) - A statement of work for performance-based acquisitions that describe the required results in clear, specific, and objective terms with measurable outcomes.

Quality Assurance (QA) - Policies and procedures adopted by the Government to ensure that supplies and services acquired under Government contracts conform to the contracts’ quality requirements.

13 September 2024

Quality Assurance Surveillance Plan (QASP) - A plan describing how the agency will survey, observe, test, sample, evaluate and document the Contractor's performance in meeting critical performance standards identified in the contract.

Quality Control (QC) - All necessary measures taken by the Contractor to assure that the quality of an end product of service shall meet contract requirements.

Subcontractor - Any person, other than the prime Contractor, who offers to furnish or furnishes any supplies, material, equipment, or services of any kind under a prime contract or a subcontract entered into in connection with such prime contract, and any person who offers to furnish or furnishes general supplies to the prime contractor or a higher tier subcontractor. The Government does not have privity of contract with a subcontractor.

2.2 Acronyms

AQL - Acceptable Quality Level ARAMS - Automated Renewal and Amendment System AWS -Amazon Web Services CFO or OCFO - Office of the Chief Financial Officer of HUD CFR - Code of Federal Regulations CIO or OCIO - Office of the Chief Information Officer of HUD CISA – Cybersecurity and Infrastructure Security Agency CISO – Chief Information Security Officer CO - Contracting Officer

COR – Contracting Officer’s Representative

COTS - Commercial Off-the-Shelf CPO - Office of the Chief Procurement Officer of HUD CSAM – Cyber Security Assessment and Management Tool CSP – Cloud Service Provider CTQ- Critical to Quality DHS – Department of Homeland Security DOS – Denial of Service EDR - Endpoint Detection and Response ETC - Estimate to Completion FAS - Financial Accounting Standards FIPS – Federal Information Processing Standards FISMA – Federal Information Security Management Act GAO - U.S. General Accountability Office GFAS - Ginnie Mae Financial Accounting System HUD - HUDAR - HUD Acquisition Regulation HUD Web - HUDs Intranet Web Site and related WEB pages.

IA – Information Assurance IAM – Information Assurance Manager IAVM – Information Assurance Vulnerability Management IPS – Intrusion Prevention System IG or OIG - Inspector General (Office of) IT - Information Technology IAVA – Information Assurance and Vulnerability Assessment ISSO – Information System Security Officer LOOCS - Line of Credit Control System MBSOA – Mortgage-Backed Securities Operations and Analytics

14 September 2024

MSR – Monthly Status Report MSS- Master sub-servicers MVC – Modeling Valuation Committee NIST – National Institute of Standards and Technology OCM – Office of Capital Markets, Ginnie Mae OCPO - Office of the Chief Procurement Officer OER – Office of Enterprise Risk OIG - Office of Inspector General OMB - Office of Management and Budget OPORD – Operational Orders POAM – Plan of Action and Milestones PL Public Law PM - Project Manager POC - Point of Contact

PPM - Project Planning and Management PPSM - Ports/Protocol/Services Management QA - Quality Assurance

QASP - Quality Assurance Surveillance Plan

QCP - Quality Control Plan

RACI – Responsible, Accountable, Consulted, Informed SA&A – Security Authorization and Accreditation SF - Standard Form SOC – Security Operations Center SOP – Standard Operating Procedure STIG - Federal Security Technical Implementation Guides SRR – Security Readiness Review TBD - To be determined U.S.C - United States Code

3 Government-Furnished Property and Services The Contractor shall ensure accurate control and accountability of all Government-Furnished Property in accordance with the terms and conditions of this contract. The Government will furnish, at no cost to the Contractor, the GFP shown below.

3.1 Government Services

Government services will not be provided.

3.2 Facilities

Government facilities will not be provided.

3.3 Equipment

The Government will provide a cloud server where contractors will log in to perform the contract work.

15 September 2024

3.4 Materials and Information

Copies of required materials may be provided to the Contractor in hard copy or soft copy. All materials will remain the property of the Government and will be returned to the COR upon request or at the end of the contract period.

3.5 Quality Assurance (QA)

The Government shall evaluate the Contractor's performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable quality level.

4 Contractor-Furnished Items and Services The Contractor shall furnish, all facilities, equipment, and supplies required to perform the work under this contract that are not listed under Government-Furnished Property and Services.

4.1 Facilities

The Contractor shall furnish all facilities required to perform the services identified within the

PWS.

4.2 Equipment

The Contractor shall furnish all equipment required to perform the services identified within the

PWS.

4.3 Materials

The Contractor shall furnish all materials required to perform the services identified within the

PWS.

4.4 Contractor Responsibilities

The Contractor shall only conduct business with designated Government personnel listed as points of contact (POCs). Names of authorized personnel shall be provided to the Contractor by the Government, in writing, and updated as necessary throughout the contract period of performance.

U.S. Government records, copies of original results and reports, verified original data, corrected data, and corrected supporting final reports which are maintained by the Contractor remain the property of the U.S. Government. These files/results must be surrendered to the COR.

4.5 Contractor Personnel

See HUDAR clause 2452.237-70 - Key Personnel in the Key Personnel section of the contract.

4.6 Identification of Contractor Employees

All Contractor/subcontractor personnel shall wear company picture identification badges so as to distinguish themselves from Government employees. When conversing with Government personnel during business meetings, over the telephone, or via electronic mail, Contractor/subcontractor personnel shall identify themselves as such to avoid situations arising where sensitive topics might be better discussed solely between Government employees.

Contractors/subcontractors shall identify themselves on any attendance sheet or any coordination documents they may review. Electronic mail signature blocks shall identify their company affiliation. Where practicable, Contractor/subcontractors occupying collocated space

16 September 2024 with their Government program customer shall identify their workspace area with their name and company affiliation, or at a minimum, "Contractor" after name.

5 Specific Tasks

5.1 Project Management

The Contractor shall provide project management support under this Contract. This includes the management and oversight of all activities performed by contractor personnel to satisfy the requirements identified in this PWS.

5.1.1 Post Award Kick-off Meeting

The Contractor shall make themselves available to participate in a post award kick-off meeting via teleconference within ten (10) calendar days of Contract award. The post award kick-off meeting will be scheduled by the COR within three (3) calendar days of Contract award. The meeting shall provide an introduction between the Contractor personnel and Government personnel who will be involved with the Contract. The Contractor shall be prepared to discuss any issues and gather information related to technical requirements, management/administrative matters, security issues, travel authorization, and reporting procedures under the Contract. The post award kick-off meeting shall serve the purpose of achieving a clear and mutual understanding of all requirements and identifying and resolving potential problems. At a minimum, the attendees shall include Key Contractor Personnel, the GNMA Subject Matter Expert (SME), other relevant Government personnel (i.e., Contract Specialist), the CO, and the COR.

Performance Standards

a. Standard: The Contractor shall participate in a post award kick-off meeting via teleconference within ten (10) calendar days of Contract award.

AQL: Zero deviation from standard.

Deliverables A01 Post Award Kick-off Meeting Participation

5.1.2 Transition-in

The Contractor shall perform all predicate services necessary to achieve full performance under this contract. The Contractor shall prepare and provide to the COR a Draft Transition-In Plan within five (5) business days of the contract award. The Plan shall detail how the Contractor will progress to full performance from award. Transition-in activities shall provide uninterrupted and continuing performance of all existing maintenance services and minimize costs due to service interruptions. Transition-in services and deliverables (A01, A02, A03) are not required if the successor Contractor is the incumbent contractor.

At minimum, the Transition-In Plan must include:

• A description of all activities necessary to ensure continuity of operations until full operational responsibility under the task order is completely assumed.

• A description of the technical approach, organizational resources, and management controls that will be utilized to meet cost, performance, and schedule requirements. This must address: planned transition activities; timelines and milestones; resource requirements; security requirements; risks and mitigation strategies; and a communication plan.

• A Work Breakdown Structure (WBS) in Microsoft Project format addressing the transition-in schedule and work products.

17 September 2024

The COR will provide the Contractor with comments and required changes to the draft plan. The Contractor must submit a Final Transition-In Plan to the COR via email within ten (10) business days of receiving the Government’s comments.

The Contractor must furnish Transition-In services as described in the approved Transition-In Plan, not to exceed ninety (90) days from the start of the period of performance. As part of Transition-In, the Contractor shall participate in weekly planning sessions with the Government and the incumbent contractor to discuss progress, resolve problems, and identify items requiring Government action. The Contractor shall coordinate with the incumbent contractor to complete the necessary documentation for the transference of Services, Service Accounts, and all existing modeling processes.

Transference Notification: The Contractor shall email the COR within five (5) business days after the completion of the transference of each service. The email shall include account information, POC, account number, provider information, and confirmation of completed transference.

Transition-In Completion Report: The Contractor must submit a Transition-In Completion Report via email to the COR within ten (10) business days of completion of all transition-in services. The report must include the final status of all activities and completion dates as annotated in the WBS.

Performance Standards

a. Standard: Submit a Draft Transition-In Plan to the COR within five (5) business days of Task Order Award via email or the designated Government folder.

AQL: Two (2) business day deviation from standard.

b. Standard: Submit a Final Transition-In Plan to the COR within ten (10) business days of receiving Government comments.

AQL: Two (2) business day deviation from standard.

Deliverables A02 Draft Transition-In Plan A03 Final Transition-In Plan A04 Final Transition-In Completion Report

5.1.3 Project Management Plan

The Contractor shall submit a Project Management Plan that shall include:

• The technical approach to each task.

• Organizational resources.

• Management controls to be employed to meet the cost, performance, tracking, and schedule requirements of the contract.

• A plan for travel.

• Standardized operating procedures (SOPs) and tools, templates, professional development, and training to be implemented for use under the Contract.

• Methodology for establishing an internal feedback system for support personnel, and for resolving problems identified by that feedback system.

18 September 2024

• Demonstrate and validate that the services and deliverables to be provided under the contract are completed with a level of quality that meets the minimum performance threshold established in the Government’s QASP.

• Address the Contractor’s quality management approach, quality assurance, quality control and quality standards ensuring the Government receives the level of quality that is consistent with the requirements specified within the Contract.

The Contractor shall submit to the COR a Draft Project Management Plan within ten (10) business days of the Contract post-award kick-off meeting. The Contractor shall submit to the COR a Final Project Management Plan within 5 business days of approval of the Draft Project Management Plan. Any required deviations from the approved plan, SOPs, tools, templates, and presentations shall be submitted in writing to the COR at least fourteen (14) business days prior to its implementation.

The Updated Project Management Plan shall be updated annually by the Contractor and approved by the COR. The Updated Project Management Plan shall be submitted to the COR for review and approval at least ninety (90) calendar days prior to the start of the option year.

Performance Standards

a. Standard: Submit to the COR a draft Project Management Plan ten (10) business days after the Contract post award kick-off meeting.

AQL: Zero deviation from standard.

b. Standard: Submit to the COR a Final Project Management Plan within 5 business days of approval of the Draft Project Management Plan.

AQL: TBD

c. Standard: Updated Project Management Plan shall be submitted to the COR for review and approval at least ninety (90) calendar days prior to the start of the option year.

Deliverables A05 Draft Project Management Plan A06 Final Project Management Plan A07 Updated Project Management Plan

5.1.4 Monthly Status Reporting (MSR)

The Contractor shall submit a Monthly Status Report (MSR), documenting the occurrence of weekly status meetings with GNMA, progress and issues related to the tasks and requirements of the Contract. The Contractor shall record meeting minutes and submit those minutes to the COR for review and approval within two (2) business days after the meeting. The Contractor shall use meeting minutes to inform the MSR. The Contractor shall submit the MSR the fifth business day of each month reflecting the activity of the previous month. The MSR shall, at minimum, include the following:

1. Burn rate or cost estimate reporting reflecting financial records for expenses incurred during the period of performance.

2. Document all work performed and completed during the month for which the status report is provided and shall identify the work to be performed during the subsequent month. During these reviews, the Contractor shall brief on work accomplished, identified, 19 September 2024 or still outstanding, work planned, upcoming milestones, completed deliverables, printing and shipping, and any problems or risks encountered/anticipated and resolved.

3. Submission of written progress reports for each task identified in the Performance Work Statement. (document status of all major tasks, milestones, and deliverables; planned and actual start and completion dates for each).

4. Management Summary - The progress reports shall cover all work performed and completed during the month for which the progress report is provided and will identify the work to be performed during the subsequent months. The progress report will identify any problems encountered or still outstanding with an explanation of the cause and resolution of the problem or how the problem will be resolved.

5. Quality Control Plan (QCP) Contractor reported metrics - i.e. metrics that require Contractor self-reporting.

6. Risks - Document any major problems/issues/corrective actions and any significant progress or events.

7. Personnel - gains, losses, and status (security clearance, etc.).

8. Government Actions required - Specific actions that the Contractor would like Ginnie

Mae to undertake to help alleviate an identified problem.

9. Yearly report will be a summary of the monthly reports with the same format by the 5th day of the first year and every subsequent year after

Performance Standards

a. Standard: The Contractor shall submit the MSR the within two (2) business days after each meeting.

AQL: Three (3) business day deviation from standard.

b. Standard: The Contractor shall record meeting minutes and submit those minutes to the COR for review and approval within two (2) business days after the meeting.

AQL: One (1) business day deviation from standard.

c. Standard: The Contractor shall provide the Monthly Status Report to the COR for review and approval by the 5th day of each.

d. Standard: The Contractor shall provide the Yearly Report to the COR for review and approval by the 5th day of the first year and every subsequent year after.

A008 Monthly Status Reporting (MSR) A009 Recorded Meeting Minutes A010 Yearly Report (Summary of the Monthly Reports for the entire Year)

5.2 Global Engagement and Advisory Services

Ginnie Mae, Office of Capital Markets (OCM) and Office of the President (OOP), are seeking contractor support services for (i) global investor engagement advisory. and (ii) mortgage data analytics, insights and intelligence services. These services need to (i) increase Ginnie Mae products’ global competitiveness and generate incremental demand from new sources for Ginnie Mae MBS in the next decade and (ii) produce recurring and ad hoc data analytics reports, whitepapers, briefing notes and presentations covering the US housing finance system including, agency MBS market, US primary and secondary mortgage markets, housing market, mortgage industry trends (i.e. originators and servicers), policy landscape, and the broader

20 September 2024 economy due on a quarterly basis, during the first three weeks of each quarter ( October, January, April, July).

The Contractor shall perform tasks for advising Ginnie Mae on any and all fluctuations affecting the Global MBS Market which may cause harm to Ginnie Mae’s portfolio of $3 trillion invested by hundreds of institutions in the U.S. and worldwide.

The Contractor shall advise in Strategic Development Action Planning to expand Ginnie Mae’s access to global decisionmakers who have political and financial influence in purchasing and holding Ginnie Mae securities.

The contractor shall:

a) Prepare, update and maintain a Business Development Plan. The Business Development Plan is an Office of Capital Markets internal guidance to implement this project goal of expanding global investors. The Business Development Plan shall establish overall yearly goals, assess internal and external resources, prioritize global regions and institutions, and build consensus within Ginnie Mae internal offices. The contractor shall provide a Draft Business Development Plan within 30 calendar days after contract award. The contractor shall provide the COR the Final Business Development Plan within 7 business days after receiving comments from the COR.

The contractor shall update this Business Development plan on a yearly basis.

b) Prepare and update an Investor Engagement Plan. The Investor Engagement Plan is an Office of Capital Markets internal guidance to establish investor engagement, and to expand global investment. The Investor Engagement Plan shall establish methods and practices to asses and obtain MBS domestic and foreign investors by assessing internal and external resources, prioritize global regions and institutions, and build consensus within Ginnie Mae internal offices. The contractor shall provide a Draft Investor Engagement Plan within 30 calendar days after contract award. The contractor shall provide the COR the Final Investor Engagement Plan within 7 business days after receiving comments from the COR. The contractor shall update this Investor Engagement plan on a yearly basis.

c) Submit to COR a Monthly Project Status Report for Global Engagement Strategies providing the activities performed and actual progress. The Monthly Project Status Report shall be current as of the last business day of the month.

d) Prepare and deliver a Global Investor Engagement Advisory Package. The package is due annually; the actual date will be determined based on OCM Annual Strategic Plan. The deliverables shall include global competitiveness and generate incremental demand from new sources for Ginnie Mae MBS in the next decade and produce recurring data analytics reports, whitepapers, briefing notes and presentations covering the US housing finance system including, agency MBS market, US primary and secondary mortgage markets, housing market, mortgage industry trends (i.e.

originators and servicers), policy landscape, and the broader economy. The contractor shall provide a Draft Global Investor Engagement Advisory Package within 30 calendar days after contract award. The contractor shall provide the COR the Final Global Investor Engagement Advisory Package within 7 business days after receiving comments from the COR.

Performance Standard:

a. Standard: Submit a Draft Global Investor Engagement Advisory Package within 30 calendar days after contract award.

21 September 2024

AQL: Zero Deviation from standard.

b. Standard: Submit the Final Global Investor Engagement Advisory Package within 7 business days after receiving comments from the COR.

AQL: Zero Deviation from standard

c. Standard: Submit the Draft Business Development Plan within 30 calendar days after contract award.

AQL: Zero Deviation from standard.

d. Standard: Submit the Final Business Development Plan within 7 business days after receiving comments from the COR AQL: Zero Deviation from Standard.

e. Standard: Update this Business Development plan on a yearly basis.

f. Standard: Submit a Monthly Project Status Report for Global Engagement Strategies to the COR on last business day of the month.

AQL: Zero business day deviation from standard.

g. Standard: Submit a Draft Investor Engagement Plan within 30 calendar days after contract award

h. Standard: Submit the Final Investor Engagement Plan within 7 business days after receiving comments from the COR.

A11 Draft Business Development Plan A12 Final Business Development Plan A13 Draft Investor Engagement Plan A14 Final Investor Engagement Plan A15 Monthly Project Status Report A16 Draft Global Investor Engagement Advisory Package A17 Final Global Investor Engagement Advisory Package

5.3 Global Markets Analysis - Data Analytics and Intelligence Services The Contractor shall submit to the COR a monthly Global Market Analysis (GMA) Report of GNMA MBS by the fifteenth (15th) day of the month or the next business day should the 15th fall on a weekend or holiday. The report shall cover the analysis of developing global macroeconomic issues impacting foreign holdings of GNMA MBS, product competitiveness, and drivers that influence investors’ demands.