Mississippi Procurement Portal #3170036835

Hattiesburg Clinic seeks hosted isolated recovery service for its Epic EHR

Hattiesburg Clinic is seeking a hosted recovery service to protect and restore its Epic electronic health record after a destructive cyberattack. - Government buyer: Mississippi Procurement Technical Assistance Program (MPTAP), publishing on behalf of Hattiesburg Clinic, P.A., in Hattiesburg, Mississippi. - Named OEM: Epic is the Clinic’s existing EHR platform; no vendor for the requested recovery service is named. - Requested service: A hosted, subscription-based EHR Isolated Recovery Environment (IRE) that maintains immutable, logically isolated copies of the Epic environment and supports recovery of its database and application servers in a clean room. - Implementation and support: Design, configuration, integration, initial data seeding, a witnessed initial recovery test, recovery runbooks, documentation, and staff training; also 24/7/365 monitoring and recovery-event support. - Key requirements: U.S.-based hosting and storage; encryption; a separate identity and management plane; malware scanning and validation before restoration; defined recovery objectives and service levels; and recovery testing at least twice per year with written results. The service must protect health information under a business associate agreement and provide a current SOC 2 Type II report or equivalent independent assessment. - Pricing requested: One-time implementation and related costs; annual IRE hosting, immutable storage, clean-room recovery, monitoring, support, and scheduled testing; optional renewal-year prices; and unit rates for added capacity, professional services, and additional recovery tests. No protected-capacity figures, product part numbers, or fixed service quantities are specified. - Term: A 12-month initial subscription from service acceptance, with two optional 12-month renewal years; renewals are not guaranteed and depend on funding availability. The procurement is described as federally funded in whole or in part through the Mississippi Rural Health Transformation Program.

Description

Hattiesburg Clinic, P.A. is seeking a hosted, subscription-based EHR Isolated Recovery Environment (IRE) service. The work includes implementation, immutable and isolated storage, recovery of the Clinic’s EHR into a clean-room environment, malware scanning and validation, and ongoing monitoring, support, and recovery testing. The initial service term is 12 months from acceptance, with two optional 12-month renewal years. The procurement is identified as federally funded in whole or in part through the Mississippi Rural Health Transformation Program.

View original listing