First Amendment to the Iowa Department of Health and Human Services 
Direct Support Job Board and Hiring Resource Request for Proposal

This Amendment to RFP Number MED-24-009 is effective as of September 14, 2023.  The RFP is amended as follows:

Revision 1.  Section 1.3.1.7.I.a, Multi-factor authentication, is hereby deleted and replaced as follows: 
Multi-factor authentication (MFA): Vendor platform must implement current Open Identity Standards such as OAuth, OpenID, and SAML and utilize approved Agency solutions for identity management and multi-factor authentication, such as Okta.  

Revision 2.  Section 1.5.1, Security Framework, third bullet, is added as follows: 
Provide SOC 2 Type 2 Report. 

Revision 3.  Section 1.5.3, Cloud Services, third bullet, is added as follows: 
Provide SOC 2 Type 2 Report. 

Revision 4.  Section 1.5.5, Maintain Compliance, is hereby added to the RFP: 
Maintain compliance with all applicable state and federal security requirements.