Factivity: You’ve Got Questions, We’ve Got Answers

Stephanie Bussenger Maureen Sudbay, CPCP Disclaimer

of America” and “BofA Securities” are the marketing names used by the Global Banking and Global Markets divisions of Corporation. Lending, other commercial banking activities, and trading in certain financial instruments are performed globally by banking affiliates of Bank of America Corporation, including Bank of America, N.A., Member FDIC. Trading in securities and financial instruments, and strategic advisory, and other activities, are performed globally by investment banking affiliates of Bank of America Corporation (“Investment Banking Affiliates”), including, in the United States, BofA Securities, Inc. and Lynch Professional Clearing Corp., both of which are registered broker-dealers and Members of SIPC, and, in other jurisdictions, by locally registered entities. BofA Securities, Inc. and Merrill Lynch Professional Clearing Corp. are registered as futures commission merchants with the CFTC and are members of the NFA. Investment products offered by Investment Banking Affiliates: Are Not FDIC Insured * May Lose Value * Are Not Bank Guaranteed. This document is intended for information purposes only and does not constitute a binding commitment to enter into any type of transaction or business relationship as a consequence of any information contained herein nor guaranty or warrant any results or effectiveness of any third parties' services or guidance contained in this document. These materials have been prepared by one or more subsidiaries of Bank of America Corporation solely for the client or potential client to whom such materials are directly addressed and delivered (the “Company”) in connection with an actual or potential business relationship and may not be used or relied upon for any purpose other than as specifically contemplated by a written agreement with us. We assume no obligation to update or otherwise revise these materials, which speak as of the date of this presentation (or another date, if so noted) and are subject to change without notice. Under no circumstances may a copy of this presentation be shown, copied, transmitted or otherwise given to any person other than your authorized representatives. Products and services that may be referenced in the accompanying materials may be provided through one or more affiliates of Bank of America, N.A. We are required to obtain, verify and record certain information that identifies our clients, which information includes the name and address of the client and other information that will allow us to identify the client in accordance with the USA Patriot Act (Title III of Pub. L. 107-56, as amended (signed into law October 26, 2001)) and such other laws, rules and regulations. We do not provide legal, compliance, tax or accounting advice. For more information, including terms and conditions that apply to the service(s), please contact your Bank of America representative. Investment Banking Affiliates are not . The securities and financial instruments sold, offered or recommended by Investment Banking Affiliates, including without limitation money market mutual funds, are not bank deposits, are not guaranteed by, and are not otherwise obligations of, any bank, thrift or other subsidiary of Bank of America Corporation (unless explicitly stated otherwise), and are not insured by the Federal Deposit Insurance Corporation (“FDIC”) or any other governmental agency (unless explicitly stated otherwise). This document does not constitute investment advice or a recommendation or an offer or solicitation, and is not the basis for any contract to purchase or sell any security or other instrument, or for Investment Banking Affiliates or banking affiliates to enter into or arrange any type of transaction as a consequent of any information contained herein. With respect to investments in money market mutual funds, you should carefully consider a fund’s investment objectives, risks, charges, and expenses before investing. Although money market mutual funds seek to preserve the value of your investment at $1.00 per share, it is possible to lose money by investing in money market mutual funds. The value of investments and the income derived from them may go down as well as up and you may not get back your original investment. The level of yield may be subject to fluctuation and is not guaranteed. Changes in rates of exchange between currencies may cause the value of investments to decrease or increase. We have adopted policies and guidelines designed to preserve the independence of our research analysts. These policies prohibit employees from offering research coverage, a favorable research rating or a specific price target or offering to change a research rating or price target as consideration for or an inducement to obtain business or other compensation. © 2020 Bank of America Corporation. All rights reserved. Objectives

After attending this session, you will be able to:

•To implement best practices in to your Card Program •Understand how to contact the Bank of America Support Teams and when to contact the Dedicated Support Team or the Help Desk

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Question # 1

One of my Cardholders is leaving our agency/organization. What steps do I need to take as the PA?

Factivity answer # 1  For State PA’s, you must cancel the card and also deactivate the user profile in Works.  TIP: If you deactivate the user profile first, you will be prompted to also cancel the card.

 For State PA’s, you must perform an Annual Security Review. This review is to certify that all Works users and roles are valid and necessary. (NEW security requirement)

 For PSUB PA’s, the two items listed above are best practices. You should include these two steps in your process

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Question # 2

Can a Backup PA perform the same duties as a Primary PA?

Factivity answer # 2  YES, Backup PA’s have all the same roles, responsibilities and access as the Primary PA.

 TIP for State PA’s, you must add/delete PA’s by submitting the Program Administrator Form along with training certificates to CCA. The form must be signed by an Authorized Officer listed on your DOA Authorized Signatory Form (DA-04-121-Cardinal). All CCA forms can be found at https://www.doa.virginia.gov/forms.shtml#ChargeCard

 TIP for PSUB PA’s: o add/delete PA’s by contacting the Dedicated Servicing Team o a lso, remember to add/delete the PA in Works

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Question # 3 The new Single Transaction Limit (STL) increased to $10,000 for State Agencies. Should I change ALL my Cardholder’s profile to match the new limit? What is the Single Transaction Limit for PSUBS? Factivity answer # 3

 For State PA’s: o NO. PA’s must review and justify if their Cardholders need an increase. o Temporary and permanent increases within the State mandated limits can be increased by PA’s without DOA approval. As such, requests received will be denied.  For PSUBS PA’s: o Each PSUBS sets their own STL. The STL should be included in your Policies and Procedures.

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Question # 4 Sometimes, I call the wrong Servicing Team at Bank of America. How do I know which team to call? Factivity answer # 4

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Factivity answer # 4 (cont.)

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Question # 5 What is Virtual Payables? Factivity answer # 5

For State PA’s: o Virtual Payables is an electronic accounts payable solution to facilitate post-invoice payments to our supplier using a dedicated credit card administered by DOA. o COVA has partnered with Bank of America to facilitate the enrollment process which includes calling and mailing campaigns. o Suppliers who enroll and agree to accept credit card payments for any dollar amount are able to receive their payment up to 14 days earlier as an incentive. o The current processes for orders and invoices remain the same. The only change will be to the payment process. o A Virtual Payables supplier will have an active EPAY default location and an approved voucher will have a GE Payment Method in Cardinal

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Factivity answer # 5 (cont.)  For PSUBS:

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Question # 6 What should I do if I receive a FOIA Request? Factivity answer # 6

For State PA’s: o REDACT all Account Numbers (Corporate and Cardholder) o REDACT all Cardholder Names Virginia Freedom of Information Act § 2.2-3705(13) provides an exemption for credit card account numbers. While there is no specific exemption for Cardholder Name we recommend withholding cardholder names. This is a recommended best practice from the Bank of America. When we withhold cardholder names, we site exemptions related to internal control, Virginia Freedom of Information Act § 2.2-3705.2.9, § 2.2-3705.2.2; Government Data Collection and Dissemination Practices Act § 2.2-3803.A.3 and 9; and Virginia Information Technologies Agency § 2.2-2009.A.3. If your request is for a specific cardholder's transactions we recommend responding in a manner that it does not confirm they have a card, i.e. “Attached you will find a list of all card transactions for the Insert agency name”.

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Factivity answer # 6 (cont.)

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Question # 7 Are there additional resources available for PA’s to learn more about the card world? Factivity answer # 7 YES, there are two resources we would recommend.

 Bank of America Card Assistant. A one-stop shop for Commercial Card Program Administrators. Resources include: o Industry News o Tips and Tricks o Training Videos o Webinar Replays Training videos: o GCA Registration o GCA Password Reset o Viewing Payment Center Transactions o Viewing Payment Center Auth/Decline

www.bofa.com/cardassistant

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Factivity answer # 7 (cont.)  National Association of Purchasing Card Professionals (NAPCP) www.napcp.org

Bank of America is not affiliated with NAPCP, does not receive compensation for recommending, and does not guaranty and is not liable for any guidance or assistance provided by NAPCP. For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Question # 8 What are the some best practices and advantages of using a Purchase Cards? Factivity answer # 8

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Factivity answer # 8 (cont.)

 Calculate your cost savings:

Per # of Transaction Savings Transactions Savings 100 $69.85 $6,985 1,000 $69.85 $69,850 10,000 $69.85 $698,500 For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Question # 9 Do you have any recommendations we can share with our cardholders on how to prevent fraud? Factivity answer # 9

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America Question # 10

The particular Spend Control Profile I need is not in Works. Can I add it?

Factivity answer # 10  For State Agencies in the Commonwealth Instance, PA’s must submit a new profile request directly to CCA. Your request must include Cycle Limit (CL), Single Transaction Limit (STL), MCC Group Restrictions Needed, and if the profile is Online Reconciliation (OLR). Profile limits must be in increments of $5,000. This is a new requirement.

 For State Agencies in their own Instance, PA’s may continue to create spend control profiles as needed. Although it’s not required, CCA suggests you follow the same procedure for limiting profiles to $5,000 increments.

 For PSUB PA’s, you policy and procedures will dictate Cycle Limit (CL), Single Transaction Limit (STL), and if any MCC Group Restrictions are needed.

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America What other questions do you have?

For Discussion Purposes Only; Proprietary and Confidential Information of Bank of America