First Amendment to the Iowa Department of Health and Human Services 
HCBS Learning Management System Request for Proposal

This Amendment to RFP Number MED-24-008 is effective as of September 14, 2023.  The RFP is amended as follows:

Revision 1.  Section 1.3.1.6.A.a, Multi-factor authentication (MFA), is deleted and replaced as follows: 
Vendor platform must implement current Open Identity Standards such as OAuth, OpenID, and SAML and utilize approved Agency solutions for identity management and multi-factor authentication, such as Okta. 

Revision 2.  Section 1.5.1, Security Framework, third bullet, is added as follows: 
Provide SOC 2 Type 2 Report. 

Revision 3.  Section 1.5.3, Cloud Services, third bullet, is added as follows: 
Provide SOC 2 Type 2 Report. 

Revision 4.  The second Section 1.5.4, Addressing Concerns, is deleted in its entirety. The first Section 1.5.4, Addressing Concerns, remains in its entirety. 

Revision 5.  Section 1.5.5, Maintain Compliance, is hereby added to the RFP: 
Maintain compliance with all applicable state and federal security requirements.