RFI_Ginnie Mae MBSIBA_ATTACHMENT DRAFT PWS.docx

Request for Information Attachment 1 – Draft PWS

Ginnie Mae Mortgage-Backed Securities Issuance & Bond Administration (MBSIBA)

SECTION C – PERFORMANCE WORK STATEMENT

C.1 BACKGROUND

The Government National Mortgage Association’s (Ginnie Mae) Mortgage-Backed Securities (MBS) programs include Single Family, Multifamily, Manufactured Housing, Home Equity Conversion Mortgages (HECM) and Multiclass securities. These programs help to channel funds from the nation's capital markets into the housing market. The U.S. Government's full faith and credit guarantee makes MBS securities widely acceptable to capital markets investors which choose to invest in primary mortgages because of the guarantee. Issuers that receive funds through the sale of MBS securities can use the capital to make additional residential and other types of mortgage loans. Through this process, the MBS program increases the overall supply of credit available for housing and helps to ensure that credit is available at reasonable interest rates.

The PPA/CPTA services are the primary services that support Ginnie Mae’s over $2 trillion MBS portfolio. These services support the day-to-day operations for the PPA/CPTA, the Platinum Trustee and the Multiclass Information Agent program requirements using Ginnie Mae’s proprietary Securitization Platform. These services are highly customized and automated and shall be executed through Ginnie Mae’s proprietary applications that consist of Ginnie Mae’s Securitization Platform.

Ginnie Mae’s Securitization Platform is an all-encompassing term for the numerous proprietary business applications, databases and systems necessary to support the issuance and administration of Ginnie Mae’s MBS programs. The Securitization Platform supports Issuer, Document Custodian and Investor user interfaces, including the management of the MyGinnieMae Portal. The Securitization Platform is supported by multiple Ginnie Mae business partners.

C.1.1 Purpose The purpose of this requirement is to obtain services to support Ginnie Mae’s securitization process, which includes MBS pool processing, delivery of securities, collection and payment of funds, transfer of Mortgage Servicing Rights (MSRs), Operations and Maintenance (O&M), hosting of the related Ginnie Mae pool processing and paying and transfer agent systems, applications and software and hosting migration services. Obtaining these services will assist Ginnie Mae with its overall goal of guaranteeing to investors through its MBS program, the timely payment of principal and interest (P&I) due on MBS issued securities that are backed by pools of mortgages insured or guaranteed by the Federal Housing Administration (FHA), the Department of Veterans Affairs (VA), the U.S. Department of Agriculture (USDA), and the Department of Housing and Urban Development’s (HUD) Public and Indian Housing program (PIH). While Ginnie Mae currently securitize government guaranteed loans, ongoing housing reform initiatives may expand Ginnie Mae’s role in the future.

C.1.2 Agency Mission Ginnie Mae guarantees that investors in bonds guaranteed by its programs will receive the timely payment of P&I. Ginnie Mae is a wholly owned corporate instrumentality of the United States located within HUD. Its powers are prescribed by Title III of the National Housing Act, as amended (12 U.S.C. 1716 et seq.). Through its MBS programs, Ginnie Mae guarantees privately issued securities that are backed by pools of mortgages insured or guaranteed by the FHA, the VA, the USDA Rural Housing Service (RHS), and HUD’s PIH. Ginnie Mae guarantees the registered holder of the securities the timely payment of scheduled monthly P&I payments, loan prepayments and early recoveries of principal on the underlying mortgages. If borrowers fail to make timely payments on their mortgages, the Issuer of the MBS must make the timely payments to the registered holders, using the Issuer’s own resources. The Ginnie Mae MBS Program is governed by guaranty agreements entered into by Ginnie Mae and Issuers according to the terms of the Mortgage-Backed Securities Guide (MBS Guide). The MBS Guide is available on Ginnie Mae’s website at www.ginniemae.gov. Additional program information is available in Attachment – Mortgage-Backed Securities Overview in the Appendix. For a list of acronyms used in this Performance Work Statement (PWS) see Attachment - Acronym Table in the Appendix.

C.2 SCOPE

The scope of the MBSIBA work to be performed under this PWS includes:

(a) Grant and manage access to Ginnie Mae applications via the Ginnie Mae Enterprise Portal and ensure program participants meet MBS program guidelines.

(b) Process mortgage pool and loan information documents for issuing securities and for issuing Platinum pools. This includes performing all required pooling prerequisites and subsequent pooling activities to enable the delivery of securities.

(c) Receive and process Issuer requests to transfer MSR to other Ginnie Mae Issuers in good standing. This includes ensuring that Issuers have submitted all information using the Pool Transfer System (PTS), duly approved and properly executed in accordance with Ginnie Mae program requirements as outlined in the MBS Guide. Collect all required servicing transfer fees and forward to Ginnie Mae.

(d) Deliver issued pools to Federal Reserve for settlement.

(e) Maintain a Central Registry of outstanding Ginnie Mae Single-class and Multiclass Securities. Maintain the official security holder record for each MBS issuance in the Ginnie Mae provided electronic online system on a real time basis. Maintain and update the Ginnie Mae Central Registry of security holders when securities are transferred or exchanged.

(f) Act as Ginnie Mae's collection and paying agent. Act as Ginnie Mae's collection agent for P&I payable by Issuers for all Ginnie Mae I and Ginnie Mae II securities; guaranty fees due to Ginnie Mae for both the Ginnie Mae I and Ginnie Mae II programs; as well as other fees or assessments as described in the MBS Guide. Act as Ginnie Mae's paying agent for Ginnie Mae I and Ginnie Mae II securities; make all emergency payments for Ginnie Mae I securities where the responsible Issuer cannot make payment; and other payments as Ginnie Mae shall require.

(g) Act as the trustee for Platinum MBS. Perform the monthly administration of all Platinum securities, which includes the issuance, delivery of trust receipts and disclosure of factors on Platinum securities. On a monthly basis, perform financial analysis and maintain the Multiclass Database containing information on outstanding Platinum securities, listing of pools backing each Platinum security, and related information.

(h) Act as Ginnie Mae Real Estate Mortgage Investment Conduit (REMIC) Information Agent for all Ginnie Mae guaranteed Multiclass Securities and provide REMIC support services. Maintain Ginnie Mae’s REMIC automated system database on REMIC offering circular supplements, listing of pools backing each REMIC, and related information.

(i) Provide a Data Center Facility that meets FedRAMP requirements. A FedRAMP certification or equivalent incorporating National Institute of Standards and Technology (NIST) SP 800-53 security controls must be met.

(j) Provide O&M, hosting of infrastructure, ensuring and maintaining compliance, and minor software enhancement services for Ginnie Mae’s systems and applications. This will include establishing and maintaining security of all platforms supported as per Ginnie Mae and federal security requirements. Systems and applications include web-based and mainframe based technologies, software and related processes. O&M support includes patching all infrastructure, operating systems and applications, corrective action to production systems from defects (“bug” fixes) as well as changes to accommodate new requirements or minor enhancements to functionality, process improvements, or infrastructure. Provide support for data architecture, configurations, compliance, operational and technical incident reporting, data, quality assurance, and help desk activities. The Contractor shall maintain Ginnie Mae’s technical infrastructure through patch management, security vulnerability remediation, and performance of the system(s).

(k) Provide corrective, adaptive and other major enhancements to existing systems as part of Ginnie Mae’s modernization initiatives. In addition, provide Integrated Software Development and Next Gen support. The Contractor is required to collaborate with Ginnie Mae’s business partners on Integrated Project Teams (IPT) for new software development and Next Gen initiatives that will be undertaken by Ginnie Mae’s Software Development - Information Technology Services Multiple Award Blanket Purchase Agreement (BPA) Contractors. This could include requirements development support, technical design support, testing services, integration of the new or enhanced applications with the MBSIBA systems and applications and deployment into the MBSIBA’s application environment.

(l) Provide program participant training and attend and support Ginnie Mae at conferences relating to MBSIBA activities.

(m) Create and maintain records and archives related to MBSIBA activities.

(n) Implement and maintain a Disaster Recovery (DR) Plan to ensure continuity.

(o) Develop and maintain a Continuity of Operations Plan (COOP) to ensure continuity.

(p) Provide support for audits such as Statement on Standards for Attestation Engagements (SSAE) 18 Type II, Service Organization Controls Report (SOC) I and SOC II, Right to Audit, Federal Information System Controls Audit Manual (FISCAM), Office of Management and Budget (OMB) Circular A-123 - Management's Responsibility for Internal Control (OMB A-123), Office of Inspector General (OIG) audits and other types of reviews and audit support.

(q) At Ginnie Mae’s option, provide Data Center Migration services. Support Ginnie Mae and its IT Infrastructure Consolidation (ITIC) Provider in developing and implementing an infrastructure migration plan to migrate the portable systems and applications from current Contractor sites to the ITIC Provider. This includes migrating the portable hosted systems and applications to the ITIC Provider and establishing and supporting DevSecOps infrastructure for MBSIBA applications.

C.3 CURRENT ENVIORMENT

C.3.1 OVERVIEW OF INTEGRATED SUPPORT SYSTEMS

Ginnie Mae and its Contractors operate in a highly integrated IT infrastructure and business process environment. Systems, applications and infrastructure used to support the current PPA/CPTA contract are hosted by the PPA/CPTA Contractor. This platform is tightly integrated with systems supported by the ITIC Provider which includes direct connectivity to the ITIC technology environments. There are also several other Contractors that support additional Ginnie Mae key MBS operations, business applications and systems. This requires a high degree of integration, collaboration and coordination between each of Ginnie Mae’s business partners to support the overall Ginnie Mae enterprise. The MBSIBA Contractor will assume responsibility for all current PPA/CPTA services including hosting infrastructure as part of this contract. The MBSIBA Contractor shall provide the technical and collaborative skills necessary to operate as part of an integrated team across Ginnie Mae ecosystems to include multiple contractors as part of Integrated Project Teams.

C.3.1.1 Division of Contractor Responsibilities The MBSIBA Contractor will be responsible for the engineering, connectivity to, hosting, security, compliance, O&M, integration, and enhancements of all Ginnie Mae IT infrastructure, systems and applications necessary to support the services as described within this PWS (See H.3 Government Furnished Applications and Source Code.) The Mortgage-Backed Securities Operations & Analytics (MBSOA) Contractor is responsible for application O&M and enhancements for additional key Ginnie Mae business applications and systems outside of this contract along with the other MBSOA services they provide. Hosting services for these MBSOA applications are currently provided by the ITIC Provider. The ITIC Provider currently shares responsibility with the MBSOA Contractor for the security and O&M of the applications and the infrastructure. The applications are tightly integrated across both the current PPA/CPTA as well as the ITIC Provider with its data centers and systems. The hosting services currently provided by the PPA/CPTA Contractor will be transitioned to the MBSIBA Contractor with this contract. During the period of performance of this contract, Ginnie Mae plans to transition a portion of the MBSIBA hosted services to an ITIC Provider as described in Task Eight – Data Center Migration.

· Providing program management services for the requirements of this contract.

· Testing of infrastructure, applications or data.

· Granting application access for Ginnie Mae applications hosted by the ITIC Provider.

· In the future, there could be one or more ITIC Providers.

MBSIBA, PPA/CPTA, MBSOA & ITIC Provider

· Coordination with Ginnie Mae’s business partners on integrated projects impacting more than one (1) business partner as a result of changes to Ginnie Mae’s infrastructure, systems, applications and business processes. This work requires high levels of Contractor collaboration. The PPA/CPTA Contractor’s responsibility will be fully transitioned to the new MBSIBA Contractor.

· O&M and enhancement services for Ginnie Mae applications.

C.3.2 INFRASTRUCTURE CONSOLIDATION

Currently, Ginnie Mae’s IT and telecommunications infrastructure is hosted by two Contractors, the PPA/CPTA Contractor and the ITIC Provider. The migration and transition of PPA/CPTA portable applications has been put on hold pending an updated Ginnie Mae ITIC Program strategy and roadmap. The migration and transition of PPA/CPTA portable applications will occur after the transition of all of the PPA/CPTA services and hosted infrastructure to the MBSIBA Contractor. When migration occurs, the plan would be to transition and migrate the portable applications hosted and provided by the MBSIBA Contractor to the ITIC Provider. This will be a major effort and impacts all aspects of Ginnie Mae’s Securitization Platform which is made up of critical customized and proprietary applications and systems that Ginnie Mae and MBS market participants use on a daily basis for issuance and administration of Ginnie Mae’s MBS portfolio. See Task Eleven – Data Center Migration for information about the Contractor’s role in migration.

If Task Eleven – Data Center Migration is exercised, the MBSIBA Contractor will be required to sustain ongoing production operations during the infrastructure migration and consolidation process. The Contractor will be required to provide technical and operational support as part of migrating the portable MBSIBA hosted systems and applications to the ITIC Provider including testing of applications and parallel processing testing services to assist in the transition.

C.3.2.1 Connectivity with Consolidated Infrastructure Ginnie Mae, in coordination with the ITIC Provider and its related providers, will provide connectivity to the ITIC environments via Virtual Private Networks (VPN) for infrastructure related activities. The ITIC Provider shall provide the physical infrastructure to support dedicated connectivity such as routers, firewalls, etc. The ITIC Provider shall provide dedicated connectivity between the MBSIBA Contractor’s data centers and the ITIC environments (currently 50-100MB point to point Ethernet circuits).

C.3.2.2 Troubleshooting The Contractor shall work with Ginnie Mae's ITIC Provider for all IT-related monitoring and troubleshooting activities as well as initiatives. Coordination and management will be provided by Ginnie Mae as explained in Task Six – Operations & Maintenance.

C.3.3 HOSTING SERVICES

(a) The MBSIBA Contractor shall support geographically diverse primary and secondary data centers to ensure disaster recovery and business continuity. These centers shall be provided and operated by the MBSIBA Contractor and used to support all environments to include Production, Development, User Acceptance Testing (UAT), Training, DR, etc. necessary to support the services in this contract. The current PPA/CPTA Primary Data Center is located in Tennessee at the Tennessee Primary [Data] Center (TPC) and the current PPA/CPTA Backup Data Processing Center is located in Central New Jersey (CNJ). The MBSIBA Contractor and PPA/CPTA Contractor shall transition these data center services to the new MBSIBA primary and secondary data centers. The MBSIBA Contractor shall provide a dedicated and geographically diverse (minimum of 150 miles apart) primary and secondary (for DR purposes) data center environment for all activities supported in this contract. The secondary data center shall have a similar configuration as in the primary data center. The data centers and environment shall meet all applicable security requirements included in this contract. The data centers shall meet the Federal Information Security Management Act (FISMA) requirements.

(b) Connectivity between the MBSIBA provided data centers hosting Ginnie Mae applications and the ITIC consolidated Ginnie Mae infrastructure shall be dedicated circuits with a minimal 100MB capacity. An alternate circuit shall be setup for redundancy and for DR scenarios. The two circuits shall have different Internet Service Providers (ISP) to handle connectivity in the event an ISP has an outage. Latency between the MBSIBA Contractor and the ITIC data centers cannot exceed 70MS. Dedicated circuits shall be setup for Internet connectivity with redundant ISP/circuits to handle an ISP related outage/issue. If an issue is experienced, the MBSIBA Contractor shall be able to switch control over to the other ISP. The primary and secondary data centers shall be connected via an Optical Carrier 192 network (10Gbps). The data centers must be able to accept Managed Trusted Internet Protocol Service (MTIPS) / Trusted Internet Connection (TIC) connectivity which will be provided by Ginnie Mae. All connectivity, to include circuits and infrastructure, between the MBSIBA Contractor and the existing PPA/CPTA environments must be provided by the MBSIBA Contractor for the duration of the Transition-In. The minimal capacity is required to be 1GB.

C.3.4 PROGRAM PARTICIPANTS & STAKEHOLDERS

Ginnie Mae’s primary program participants are its MBS Issuers, Document Custodians and Investors. Ginnie Mae’s roles and responsibilities for supporting its program participants are described below along with the supporting roles of the MBSIBA and MBSOA Contractors. Ginnie Mae’s goal is to continuously improve the services, information and training it provides to its program participants to meet program requirements.

(a) Ginnie Mae’s Roles & Responsibilities for Supporting Program Participants:

(1) Issuer Relationship Management: Ginnie Mae's Single Family and Multifamily Account Executives (AEs) of the Office of Issuer and Portfolio Management (OIPM) and the Office of Securities Operations (OSO) manage the relationships with the mortgage lenders and servicers who issue securities under Ginnie Mae’s MBS programs. OIPM and the AE’s partner with Issuers including banks, credit unions, housing finance agencies and mortgage banks regarding all matters concerning their participation in Ginnie Mae’s MBS programs. The Office of Enterprise Risk (OER) in collaboration with OIPM actively manages Ginnie Mae’s counterparty risk. In addition, OIPM is the lead on all Issuer and Document Custodian policy related inquires that are not easily addressed in the MBS Guide.

(2) Monitoring Program Compliance: The Ginnie Mae Monitoring Division manages and undertakes Issuer and Document Custodian Compliance Reviews and other risk monitoring activities to assure program compliance. The Ginnie Mae Asset Management Group is responsible for managing Issuer defaults.

(3) Capital Markets and Multiclass Program: Ginnie Mae’s Office of Capital Markets (OCM) directs and manages all capital markets activities. The office’s prime stakeholders are broker-dealers, asset managers, hedge funds, banks, and insurance companies. OCM also supports Ginnie Mae’s Multiclass programs (REMIC and Platinum) and developing new programs that are designed to broaden the investor base of all Ginnie Mae securities.

(b) MBSIBA & MBSOA Roles & Responsibilities for Supporting Program Participants:

(1) Program Support: The MBSIBA Contractor is responsible for supporting Ginnie Mae in the issuance of Single-class MBS and Platinum MBS, the calculation and clearing of timely payments to security holders and as well as ongoing bond administration. Ginnie Mae’s MBSOA Contractor is responsible for Investor Reporting, including publishing payment factors, daily and monthly pool and loan level data disclosures and analytics. Ginnie Mae OSO is also responsible for program support and works collaboratively with Ginnie Mae’s Contractors. (See Task Three – Pool Processing Agent Services and Task Four – Central Paying and Transfer Agent Services for requirements).

(2) Training and Technical Support: Ginnie Mae’s OSO Customer Experience Group is responsible for Customer Adoption, Program Participant Training, and the Centralized Help Desk. The MBSIBA Contractor and MBSOA Contractor both have responsibilities for supporting these functions based on their respective MBS operational roles. In general, the MBSIBA provides pooling processes and systems related training and the MBSOA provides Investor Reporting processes and systems related training to Ginnie Mae and its program participants. In general, both Contractors support customer adoption efforts to ensure users are able to transition to new applications or business processes efficiently. (See Task 10 Conferences and Training for requirements).

(3) Centralized Help Desks: The MBSIBA and MBSOA both provide Help Desk services based on their respective operational roles and the applications they support. (See Section C.4.6.3 Centralized Help Desk for requirements).

Roles & Responsibilities for Supporting Program Participants

Issuers Subservicers Document Custodians

· Relationship Management

· Counter Party Risk Management

· Policy Interpretation

· Program Participant Training Ginnie Mae Account Executives, the Office of Issuer and Portfolio Management (OIPM), the Office of Enterprise Risk (OER) and the Office of Securities Operations (OSO).

· Monitors Program Compliance

· Performs Compliance Reviews

· Manages Issuer Defaults Ginnie Mae Monitoring Division and Asset Management Group

· Program Support

· Program Participant Training on business processes and applications

· Customer Adoption

· Centralized Help Desk MBSIBA and MBSOA Contractors for their respective operational roles and applications; Ginnie Mae OSO for coordination of Customer Adoption, Program Participant Training and Centralized Help Desk.

· Multiclass Program Management

· Business Development

· Product Development Ginnie Mae Office of Capital Markets

C.3.5 DESCRIPTIONS OF APPLICATIONS & DATABASES

The Contractor shall utilize the applications and systems listed below to complete the work outlined in the PWS. The Contractor will be responsible for hosting, operating, and maintaining the following applications and systems until Ginnie Mae exercises the Data Center Migration CLIN:

MBSIBA Applications and Systems

Legacy IPMS (L-IPMS) Mainframe Modernized IPMS (M-IPMS) Accessed via Ginnie Mae Enterprise Portal (GMEP1.0)*

1. Customer Service Inquiry

2. Generalized Mortgage-Backed Securities Subsystem (GMBS)

(a) Central Registry

(b) Tax Reporting and P&I Processing

(c) Transfer Processing

3. New Pool Processing Subsystem (NPPS)

4. Platinum Pool System

5. Pool Reporting Subsystem (PRS)

1. Adjustable Rate Mortgage (ARM) Index

2. Commitment Management (CM)

3. Congressional Budget (CB)

4. Master Agreements Management System (MAMS)

5. Pool Transfer System (PTS)

6. Report Center

7. Request Pool Numbers (RPN)

8. RSA SecurID Token Management

9. Unclaimed Funds II (UFS II)

*GMEP 1.0 hosts many other applications, however they are out of scope therefore, not listed above.

MyGinnieMae Enterprise Portal*

Other Databases / Systems

1. Multifamily Pool Delivery Module (MFPDM)

2. Single Family Pool Delivery Module (SFPDM)

3. Platinum Application

4. Unclaimed Funds I (UFS I)

5. Letters of Credit

6. Corrections Help Desk

* MyGinnieMae Portal provides single sign-on access to legacy GMEP 1.0 and GinnieNET.

Note: GMEP 1.0 applications are to be portletized and will be hosted on MGM to enable the decommissioning of GMEP 1.0 in the future.

1. GinnieNET

2. Enterprise Wide Operational Data Store (EWODS)

(a) Online Transaction Processing (OLTP)

3. Public Facing Searchable Databases

(a) Multifamily Database

(b) Platinum Database

(c) REMIC Database

4. SAP Business Objects (BOBJ)

5. Informatica

(a) Legacy IPMS (L-IPMS) Mainframe

(1) Customer Service Inquiry:

The Customer Service Inquiry system is a mainframe based system. It performs three (3) major functions:

(i) GMBS Registry Inquiry:

The Generalized Mortgage-Backed Securities Subsystem (GMBS) Registry Inquiry system enables users to conduct inquiries on Issuers, investors, certificates, investor distributions and monthly transfer activity.

(ii) GMS File Maintenance:

The Generalized Mortgage Subsystem (GMS) File Maintenance System enables users to update and maintain the files with investors’ names and addresses, payment addresses as well as certificate masters.

(iii) Pool Reporting System:

The Pool Reporting System enables users to look up records by commitment, loan package, pool, Issuer and Multiple Issuer Pool (MIPs).

(2) Generalized Mortgage-Backed Securities Subsystem:

The Generalized Mortgage-Backed Securities Subsystem (GMBS) is a mainframe-based application. It performs three (3) major functions: Central Registry, Transfer Processing as well as P&I payment processing, which includes Tax Reporting.

(i) Central Registry:

The Central Registry stores information on every single security issued. The Central Registry is Ginnie Mae’s official record of an investor’s certificate/position for payment of monthly P&I. Investor data and the corresponding certificate/positions are automatically updated on the Central Registry as a result of new pool issuances or certificate transfers. The Central Registry has an inquiry function which allows for online viewing of certificates/positions. The Central Registry maintains historical data of all outstanding certificate/position and cancelled securities. With this information, the system can generate a certificate history by Issuer, pool or investor. This allows Ginnie Mae to reconstruct certificate ownership throughout the entire life of the pool, thereby, providing a valuable tool for monitoring activity.

(ii) Tax Reporting and P&I Payment Processing:

This application facilitates the collection of P&I from Ginnie Mae I and Ginnie Mae II MBS Issuers. It ensures the timely disbursement to Ginnie Mae investors. Based on Remaining Principal Balances (RPB) reported by Issuers, IPMS/PRS calculates the P&I for each pool. The pool P&I from IPMS/PRS is transmitted to GMBS. GMBS identifies registered holders for the specified record date. The pro-rata share of each open certificate/position is calculated and aggregated for each pool to obtain 100 percent. Edits are built into the payment processing program in GMBS to ensure that the total P&I calculated by IPMS/PRS for each pool is equal to the total P&I being distributed to the investors by GMBS. Exceptions are resolved prior to collecting the P&I from the Issuers. Upon curing all discrepancies, GMBS generates checks and vouchers (Remittance Advices). The checks and vouchers are mailed to certificated security holders one (1) day prior to payment date. On the payment date (20th calendar day) a Fedwire is sent to the Depository for its share of the P&I and to any investor requesting an electronic payment.

(A) This application facilitates the payments to Ginnie Mae I security holders on behalf of Ginnie Mae, when the Issuer of the securities does not or cannot make payments directly. Once the payments are in proof, funds are requested from Ginnie Mae. Payments to investors will be made on the distribution date (upon receipt of funds from Ginnie Mae) to each holder of record as of the record date. For book entry securities, funds will be wired to the Depository; for securities held in physical form checks will be mailed to the investors.

(B) This system facilitates the calculation of factors. A factor is the percentage of the original principal amount that will remain outstanding once the scheduled monthly payment on the securities has been made. These factors are used by securities dealers, investors, and others involved in trading Ginnie Mae securities and are vital to the proper allocation, among classes of Ginnie Mae REMIC securities, of monthly cash flows on the underlying Ginnie Mae MBS.

(iii) Transfer Processing Updates:

This application performs the back-end updates (Issuer re-assignments) that need to occur to complete the pool transfer process.

(3) New Pool Processing Subsystem:

The New Pool Processing Subsystem (NPPS) is a mainframe application that is used to certify, review, and approve loan and pool documents in order to issue new MBS. The main objective of this system is to check transfer eligibility status of pools and Issuer, and reassign purchased pools to the purchasing Issuer’s portfolio on the transfer effective date. NPPS performs the following functions:

(i) Accepts for processing and issuance;

(ii) Re-edits pools from GinnieNET and pool delivery modules;

(iii) Allows data entry of manual pools;

(iv) Checks Master Agreements;

(v) Checks Commitment Authority, status, and pool numbers;

(vi) Generates MIPs;

(vii) Releases new issue files to the Federal Reserve;

(viii) Updates Bank’s Fed Delivery System with pool delivery instructions;

(ix) Updates pools to Pool Reporting Module;

(x) Creates investor position on Central Registry;

(xi) Updates the Multifamily Database; and

(xii) Updates Data Disclosure data tables.

(4) Platinum Pool System:

The Ginnie Mae Platinum Pool System is a mainframe application that maintains information on Ginnie Mae I and Ginnie Mae II pools. The Platinum Pool System performs the following functions.

(i) Update or Inquiry Ginnie Mae I and Ginnie Mae II pools;

(ii) Un-Release Function; and

(iii) Platinum Pool Adjustments.

(5) Pool Reporting Subsystem:

The Ginnie Mae Pool Reporting Subsystem (PRS) is a mainframe application that maintains pool level detail for Ginnie Mae I and II pools, loan packages and Platinum pools. There are multiple components to PRS which facilitate payment calculations, P&I collection, Guaranty Fee collection, factor calculation and Platinum pool issuance. PRS performs the following functions:

(i) Processes RPBs that the MBSOA Contractor has released to Enterprise Wide Operational Data Store (EWODS);

(ii) Allows for the manual data entry of RPBs by the PPA/CPTA Contractor;

(iii) Edits RPBs;

(iv) Calculates and disseminates Factors for Ginnie Mae I, Ginnie Mae II, and Platinum pools;

(v) Calculates and generates Ginnie Mae I and Ginnie Mae II Guaranty Fee Automated Clearing House (ACH) Collections;

(vi) Calculates certification due dates;

(vii) Tracks Issuer reassignments and mergers;

(viii) Tracks custodian changes using Snapshot of a pool;

(ix) Calculates Ginnie Mae II P&I collection;

(x) Processes ARM rate changes;

(xi) Maintains MBS and Multiclass pool detail; and

(xii) Updates the Multifamily database.

(b) Modernized IPMS Portal

1. ARM Index:

The ARM Index system is accessed by both PPA operators and Ginnie Mae users. It allows:

(i) PPA ARM viewers to view ARM reports and screens.

(ii) PPA ARM submitters to enter and update index values, and submit index records for PPA approval.

(iii) PPA ARM approvers to approve and reject index records submitted by PPA submitters.

(iv) Ginnie Mae ARM viewers to review and approve ARM reports and screens.

(v) Ginnie Mae ARM approvers to approve and reject index records approved by the PPA.

1. Commitment Management:

The Commitment Management (CM) application provides an Issuer with an automated method to:

(i) Submit requests for Commitment Authority;

(ii) Confirm the associated commitment fee;

(iii) Proactively monitor their Commitment Authority balance and request status;

(iv) Submit payment instructions for ACH debit of commitment fees; and

(v) Request reports.

An Issuer must comply with Ginnie Mae’s eligibility requirements and have sufficient Commitment Authority available to successfully issue Ginnie Mae securities. Commitment Authority allows an Issuer to issue up to an authorized dollar amount of securities and constitutes a commitment line balance.

(8) Congressional Budget:

The Congressional Budget (CB) application provides Ginnie Mae Operations with an automated method to:

(i) Update Congressional Budget Allocation Security Access Roles;

(ii) Implement various types of commitment based on program type and track separately (in total and at an individual Issuer level);

(iii) Allocate, adjust, reserve, freeze/restore, ration or delete Congressional Budget Allocation;

(iv) Edit carryover amount and not to exceed controls;

(v) Commitment expiration;

(vi) Perform Issuer initiation rollover; and

(vii) Enter newly allocated budget allocations from Congress.

The CB application also provides the following functionality for Ginnie Mae operations:

(viii) Auto application of freeze annually of congressional budget amounts;

(ix) Auto application of default reserve amount;

(x) Auto application of Fiscal Year initiation; and

(xi) Auto application of Congressional Budget allocation close-out timestamp.

(9) Master Agreements Management System:

The Master Agreements Management System (MAMS) provides Issuers, Subservicers, Participation Agents and Document Custodians with an automated method to:

(i) Input the data required to create the agreements;

(ii) Upload and import scanned copies of the physical documents, where applicable;

(iii) Print agreements;

(iv) Search and view agreements;

(v) Access and view reports; and

(vi) Certify forms using a multi-factor authentication methodology.

(10) Pool Transfer System:

The Pool Transfer System (PTS) application provides an Issuer with an automated method to:

(i) Initiate and update pool transfer request information;

(ii) Import and update pool numbers being transferred;

(iii) View and receive the associated approval documentation;

(iv) Approve or reject pool transfer requests from the selling Issuer;

(v) Access and view reports;

(vi) Confirm associated transfer fees and submit payment instructions for ACH debit; and

(vii) Receive electronic notifications of transfer requests and reports to Ginnie Mae AEs and the Pool Processing Issuer.

(11) Report Center:

The Report Center application provides Ginnie Mae users with access to the already made (canned) IPMS reports generated by each application. Ginnie Mae users can query already made reports, print and Portable Document Format (PDF) these reports. Users cannot generate new customized reports in Report Center.

(12) Request Pool Numbers:

The Request Pool Numbers (RPN) application provides an Issuer with an automated method to:

(i) Submit requests for pool numbers and receive immediate response;

(ii) View available pool numbers;

(iii) Submit override requests to Ginnie Mae AEs for additional pool numbers;

(iv) Download and view status reports, and

(v) Receive auto-reminders of pool number inventory.

(13) RSA SecurID Token Management:

The RSA SecurID token is part of a two-factor authentication process used by Ginnie Mae to ensure that the individuals performing the submission or approval function(s) in Ginnie Mae’s systems are authorized to do so. For example, RSA SecurID tokens must be used by end users responsible for requesting Commitment Authority, managing and submitting Master Agreements, requesting Pool Transfers as well as submitting pools and reports.

The RSA SecurID Token Management application supports the provisioning and administration of Ginnie Mae RSA SecurID tokens. Once an end user has a token, they can access a Ginnie Mae system and/or submit an approval by entering their User ID and password, for that system, followed by entering a personal identification number (PIN), (assigned when a user performs the initial RSA SecurID validation) along with the one-time password provided by the RSA SecurID token.

(i) The token utilizes a database hosted by the PPA/CPTA Contractor. There are several applications that utilize the database.

(ii) The PPA/CPTA Contractor is also responsible for providing and provisioning tokens to authorized signers only.

(iii) Authorized signers must appear on the HUD form 11702. The PPA/CPTA Contractor performs this validation prior to issuing a token.

(14) Unclaimed Funds II:

The Ginnie Mae II program requires the CPTA to make payments directly to the security holder. In the event the funds are not received by the security holder, then Ginnie Mae holds the outstanding payment. The Unclaimed Funds System II (UFS II) allows Ginnie Mae to track and reconcile Ginnie Mae II MBS unclaimed P&I payments. Ginnie Mae’s UFS II is used for tracking, honoring claims from Issuers and investors and reconciling receipt versus payment of unclaimed funds.

1. The Ginnie Mae’s PPA Customer Service Group tracks Ginnie Mae II unclaimed funds on UFS II. Funds for all returned and/or uncashed checks that have aged six (6) months are remitted to Ginnie Mae. All claims received from investors are verified against UFS. If the claims are valid, the funds are requested from Ginnie Mae. On receipt of the funds a replacement check is issued to the investor. Monthly reconciliation reports are forwarded by Ginnie Mae’s PPA to Ginnie Mae for both Ginnie Mae I and II MBS programs.

(c) MyGinnieMae Portal:

MyGinnieMae serves as the centralized security control solution for Ginnie Mae portals and applications, as well as the identity management solution for its users. MyGinnieMae is a collection of access control-based services, policies, rules, and technical methods used to manage access to applications or resources within the MyGinnieMae Portal. MyGinnieMae provides users with an industry-standard secure means for access to the Ginnie Mae ecosystem which will enable use of integrated applications to perform business processes. The solution provides client-side, delegated administrators with the ability to manage users’ access to the MyGinnieMae Portal. The system consists of an application infrastructure and Single Sign-On (SSO) environment, Web Services, and Identity and Access Management (IAM) services. As of this PWS issuance, there are eight (8) applications that are accessible via MyGinnieMae:

(1) Ginnie Mae Enterprise Portal (GMEP 1.0):

Ginnie Mae Enterprise Portal (GMEP 1.0) is a browser-based system that includes points of entry via a common presentation layer including: Reporting and Feedback System (RFS), Salesforce, SAP Business Objects (BOBJ), Query and Reporting Tool, plus M-IPMS. The table below identifies the suite of RFS applications that are maintained by the MBSOA and hosted by the ITIC Provider. The PPA/CPTA Contractor will not be responsible for the O&M for these RFS applications. However, the PPA/CPTA Contractor is responsible for hosting M-IPMS.

(i) GMEP 1.0 also contains and enforces user access and elements of IT security. The GMEP Common Controls (CC) System Security Plan (SSP) identifies the security description of the infrastructure components, policies, and procedures. For information regarding the CC of GMEP, refer to the GMEP CC SSP.

(ii) Another function of GMEP is to serve the historical reporting needs of the enterprise. It provides the user the ability to access canned reports and generate ad-hoc queries.

(2) GinnieNET System:

GinnieNET is an internet application that is used by Issuers to electronically submit MBS pools, final certifications and recertification information. HUD forms include: 11705 – Schedule of Subscribers and Ginnie Mae Guaranty Agreement, 11706 – Schedule of Pooled Mortgages, 11708 - Transfers of Document Custodian Responsibility, 11711A - Release of Security Interest, and 11711B - Certification and Agreement. GinnieNET is used by Document Custodians to certify or reject submissions. This includes Security Administration, Maintenance, New Pool Processing, Certifications, Host Communications and Reports.

(3) Multifamily Pool Delivery Module Multifamily Pool Delivery Module (MFPDM) is an application that allows Multifamily Issuers to submit pool and loan data, to be assembled and issued as MBS. Pool and loan data can be entered manually or uploaded using a file. The above-mentioned process is currently initiated via a legacy system, GinnieNET. Document Custodians will continue to use GinnieNET to certify pool and loan data. In addition, Issuers will continue to use this application to accept pools, in the event that a transfer at issuance occurs.

(4) Single Family Pool Delivery Module Single Family Pool Delivery Module (SFPDM) is an application that allows Single Family Issuers to submit pool and loan data, to be assembled and issued as MBS. The SFPDM is an Issuer-facing application which supports the issuance process. It collects the required pool and loan data that is necessary for the creation of MBS.

(i) There are two types of files that can be submitted. Flat files and XML. SFPDM requires Issuers to utilize the XML (Mortgage Industry Standards Maintenance Organization (MISMO) compliant) data set. TransformX is a tool that Issuers may use to convert flat files to XML.

(ii) SFPDM is used for Single Family at issuance. The application contains business rule validations and provided the user with feedback. If all edits are passed satisfactorily then the pool is issued.

(iii) Once a user has migrated from GinnieNET to SFPDM, they are not able to revert back to GinnieNET.

(iv) TransformX - The Translation Layer for the Single Family Module is an application that translates legacy format flat files into the MISMO compliant PDD format.

(v) The Validation and Testing Tool (VTT) is intended to help Issuers validate and test their PDD files. It can also be leveraged to assess Issuer readiness to submit PDD XML compliant information. This application is operated and maintained by the MBSOA Contractor.

(5) Platinum processing application will allow depositors the ability to edit Platinum collateral as it is received in the MyGinnieMae Portal and to accommodate higher request volumes. The application also automates the following functionality:

(i) Submission of Deposit Agreement and Confirmation: Pool Number, Committee on Uniform Securities Identification Procedures (CUSIP) Limited Purpose Account (LPA) in MyGinnieMae Portal.

(ii) Security CUSIP load to the Federal Reserve Bank of New York (FRBNY); automated integration into Mainframe.

(iii) Trust Receipt Generation in MyGinnieMae Portal.

(6) Unclaimed Funds I (MGM): The Ginnie Mae I program requires the Issuer of record to make payments directly to the security holder. In the event the funds are not received by the security holder, then Ginnie Mae holds the outstanding payment. The Unclaimed Funds System I (UFS I) allows Ginnie Mae to track and reconcile Ginnie Mae I MBS unclaimed P&I payments. UFS I is used for tracking, honoring claims from Issuers and investors and reconciling receipt versus payment of unclaimed funds. In the event the investor does not process payment and the payment is six (6) or more months old, then the funds are remitted to PPA. This application is only used by the MBSIBA operations team and is not an external facing module.

(i) Ginnie Mae I P&I funds that are unclaimed for six (6) months from the payment date, along with related form HUD 11714 and 11714SN are forwarded by Issuers to Ginnie Mae’s PPA. UFS I is used to track the amount of unclaimed funds received and pertinent information from form HUD 11714 and 11714SN for each Issuer. The unclaimed funds check received from the Issuer is deposited into an Unclaimed Funds Account. After four (4) days the funds are wired via pay.gov to Ginnie Mae. As claims are received from Issuers, they are verified against the UFS I to ensure their validity. All valid claims are forwarded to Ginnie Mae along with a request for funds. Once Ginnie Mae has approved the request, funds are forwarded to Ginnie Mae’s PPA, who then honors the claim and mails a check to the Issuer. The Contractor will work with the Issuer and Ginnie Mae to clear any exceptions and/or discrepancies.

(ii) Monthly reconciliation reports are forwarded by Ginnie Mae’s PPA to Ginnie Mae for both Ginnie Mae I and II MBS programs.

(7) Letters of Credit:

This is an internal Operations application used to track Issuer certifications. If an Issuer fails to timely final certify or recertify a pool or loan package and exceeds the threshold established by Ginnie Mae for final certification and recertification, the Issuer may be required to post a Letter of Credit (LOC) with Ginnie Mae for the loans preventing certification. This application will provide notifications on certification status and issue a request to an Issuer for a LOC. Ginnie Mae is anticipating changes in policy that could impact this application and the process.

(8) Corrections Help Desk:

This is an internal Operations application used to correct or update information on pools/loan packages. It maintains records of pool/loan packages and pool/loan defects. It also generates Authorization Forms, Correction Request Forms, and invoices for processing errors. It provides reporting on the monthly activity of registered errors per Issuer for the specified time period.

(d) Other Applications & Databases

(1) Enterprise Wide Operational Data Store:

EWODS is an Oracle relational database that stores transaction processing data that is sourced from various Ginnie Mae applications. Conceptually, EWODS is the repository of data that is collected and shared across the Ginnie Mae enterprise and with multiple contractors.

(i) EWODS has three (3) environments: Staging; Operational and Transactional Repository; and Reporting Mart. Data is processed by EWODS to move data between the environments. The data movement is a function of the Extract, Transform, and Load (ETL) process. Data is extracted from source systems, transformed, and loaded into both Staging and Repository. The Staging environment is used if additional clean-up will be required of the data. The Repository environment is used to store the data.

(ii) EWODS supports centralized data collection and feedback for all MBS new Issuer processing, new pool originations, monthly accounting and reporting for Single Family and Multifamily pools, and Multiclass securities. EWODS provides a secure single source for all Ginnie Mae’s enterprise data, minimizing redundancy and data synchronization across disparate systems. This repository stores data from all of Ginnie Mae’s Enterprise applications including RFS (maintained by Ginnie Mae’s MBSOA) and IPMS, GinnieNET and the other pool delivery modules (maintained by the PPA/CPTA).

(A) Online Transaction Processing:

Some of Ginnie Mae’s databases are in the process of being restructured into Online Transaction Processing (OLTP) databases and some new applications are supported by OLTP. The OLTP databases will support various data warehouses and reporting data marts also under development. References to “EWODS” in this PWS are intended to include OLTP databases when transitioned. Until such time that EWODS is retired it will be necessary to synchronize EWODS and OLTP databases.

(2) Public Facing Searchable Databases:

(i) Multifamily Database:

This database contains information about Ginnie Mae's Multifamily MBS at the security and loan level. Data can be searched based on certain information about Multifamily pools: pool number, CUSIP number, FHA case number or Rural Development (RD) case number, Pool type, or Issuer number.

(ii) Platinum Database:

This database contains information about Ginnie Mae's Platinum securities. Data can be searched based on CUSIP or pool.

(iii) REMIC Database:

The REMIC database is utilized as a search tool and a vehicle to post data by different partners of Ginnie Mae.

(A) The PPA/CPTA and the Deal team (sponsor, trustee, financial advisor, and accountant) post various data to the site – Offering Circular Supplement, Announcement, Relay File, etc. Trustees also post deal factors on a monthly basis along with floating rates and series factors. The Contractor posts indices and utilizes this upload feature for Platinum Submission reporting;

(B) The search tool can display REMIC deal data, payment factors & rates, and indices. Search page locates REMIC deals by either CUSIP number or Deal number.

(3) SAP Business Objects:

SAP Business Objects (BOBJ) is used to support both PPA/CPTA and MBSOA applications. BOBJ supports the MBSOA’s RFS Pool Accounting & Exception Feedback (PAEF), Issuer Operational Performance Profile (IOPP), Master Subservicer Operational Reporting (MOR), Data Analysis and Reporting Tool (DART) as well as…