# Mississippi Procurement Portal #3170036835

Hattiesburg Clinic seeks hosted isolated recovery service for its Epic EHR

**Posted:** October 30, 2026
**Respond By:** November 01, 2026
**Identifier:** 3170036835
**NAICS:** 541512, 541519

Hattiesburg Clinic is seeking a hosted recovery service to protect and restore its Epic electronic health record after a destructive cyberattack.
- **Government buyer:** Mississippi Procurement Technical Assistance Program (MPTAP), publishing on behalf of Hattiesburg Clinic, P.A., in Hattiesburg, Mississippi.
- **Named OEM:** **Epic** is the Clinic’s existing EHR platform; no vendor for the requested recovery service is named.
- **Requested service:** A hosted, subscription-based EHR Isolated Recovery Environment (IRE) that maintains immutable, logically isolated copies of the Epic environment and supports recovery of its database and application servers in a clean room.
- **Implementation and support:** Design, configuration, integration, initial data seeding, a witnessed initial recovery test, recovery runbooks, documentation, and staff training; also 24/7/365 monitoring and recovery-event support.
- **Key requirements:** U.S.-based hosting and storage; encryption; a separate identity and management plane; malware scanning and validation before restoration; defined recovery objectives and service levels; and recovery testing at least twice per year with written results. The service must protect health information under a business associate agreement and provide a current SOC 2 Type II report or equivalent independent assessment.
- **Pricing requested:** One-time implementation and related costs; annual IRE hosting, immutable storage, clean-room recovery, monitoring, support, and scheduled testing; optional renewal-year prices; and unit rates for added capacity, professional services, and additional recovery tests. No protected-capacity figures, product part numbers, or fixed service quantities are specified.
- **Term:** A 12-month initial subscription from service acceptance, with two optional 12-month renewal years; renewals are not guaranteed and depend on funding availability. The procurement is described as federally funded in whole or in part through the Mississippi Rural Health Transformation Program.

### Description

Hattiesburg Clinic, P.A. is seeking a hosted, subscription-based EHR Isolated Recovery Environment (IRE) service. The work includes implementation, immutable and isolated storage, recovery of the Clinic’s EHR into a clean-room environment, malware scanning and validation, and ongoing monitoring, support, and recovery testing. The initial service term is 12 months from acceptance, with two optional 12-month renewal years. The procurement is identified as federally funded in whole or in part through the Mississippi Rural Health Transformation Program.

[View original listing](https://www.ms.gov/dfa/contract_bid_search/Bid/Details/46886?AppId=1)