Mississippi Procurement Portal #3170036837

Hattiesburg Clinic seeks AI email threat detection and browser protection for 2,001 Microsoft 365 users

Hattiesburg Clinic, P.A. is seeking a cloud-based email and browser security service for its Microsoft 365 environment. - Government buyer: Hattiesburg Clinic, P.A., Information Systems office, Hattiesburg, Mississippi; MPTAP is listed as the agency/customer in the procurement record. The solicitation notes funding in whole or in part from the Mississippi Rural Health Transformation Program. - OEMs and vendors: No manufacturers, OEMs, or commercial vendor products are named in the documents. Hattiesburg Clinic and MPTAP are identified in the procurement record; neither is presented as a product vendor. - Requested subscriptions: - AI-driven email threat detection for 2,001 Microsoft 365 users, priced per user per year; no part number specified. - Centrally managed web-browser protection for 2,001 users, priced per user per year; no part number specified. - Year 1 pricing also requests support and other recurring costs. Optional Year 2 and Year 3 total annual subscription prices are requested. - Implementation and services: Onboarding and implementation assistance, administrator training and knowledge transfer, subscription-term technical support, named account contact, and monthly threat reporting. Deployment should be substantially complete within 30 days of contract execution. Pricing also requests other one-time costs, an additional-user annual rate, and a professional-services hourly rate. - Notable technical and security requirements: Microsoft 365 API integration behind the existing secure email gateway, with no mail-flow or MX-record changes and no on-premises hardware. The service must detect business email compromise, executive or vendor impersonation, lookalike domains, credential phishing, QR-code and image-based phishing, and links that become malicious after delivery. It must support post-delivery removal or quarantine with administrator review and release, as well as browser protection against malicious and credential-harvesting sites. Security conditions include a HIPAA Business Associate Agreement before access to potentially protected health information, U.S.-based data storage and processing, a current SOC 2 Type II report or equivalent independent assessment, least-privilege API permissions, and certified data destruction at termination.

Description

Hattiesburg Clinic is seeking an AI-driven service for email threat detection and web-browser protection for Microsoft 365, covering 2,001 users. The service must operate behind the existing secure email gateway, detect and remediate threats including business email compromise, impersonation, phishing, and malicious links, and protect users in their browsers. Scope also includes implementation, administrator training, support, monthly threat reporting, and security and privacy requirements for handling potentially protected health information. The initial term is 12 months, with two optional 12-month renewals; proposals are due November 1, 2026.

View original listing