Application Security Posture Management (ASPM)

Inland Empire Health Plan (IEHP) has issued a Request for Needs (RFN) for an Application Security Posture Management (ASPM) tool targeting comprehensive web application security for healthcare environments. The procurement seeks a sophisticated security solution capable of continuously managing application risk through data collection, analysis, and prioritization of security issues across the software lifecycle. The ASPM tool must integrate with existing security infrastructure, detect and prioritize vulnerabilities, and ensure compliance with healthcare regulations like HIPAA and HITRUST. Key deliverables include capabilities for discovering applications and dependencies, integrating with CI/CD pipelines, generating risk scores, providing comprehensive dashboards and reports, and supporting scalability. Critical procurement dates include a Supplier Question Submission Deadline of 10/22/25, an RSVP Form Submission Deadline of 11/5/25, and planned virtual strategy discussions during the week of 11/10/25. IEHP will conduct individual one-hour discussions with the first five suppliers submitting an RSVP, with the objective of developing a more accurate Scope of Work and approach for a future Proof of Concept (POC) phase.

The procurement does not explicitly specify set-aside designations or restrictions on responding organizations. The RFN includes a Non-Collusion Declaration form requiring bidders to affirm the independence and integrity of their submission, preventing collusive or fraudulent bidding practices. While specific budget ranges are not disclosed, the document contains 47 detailed discussion questions covering technical capabilities, support levels, pricing models, data protection, and solution effectiveness. The procurement targets vendors capable of providing advanced application security management specifically tailored to healthcare technology environments. Suppliers are expected to bear their own costs for participation in the virtual discussion process. The ultimate goal is to select a vendor that can provide a robust, compliant, and comprehensive application security solution that meets IEHP's complex healthcare technology security requirements.