4618-20261013152026 Hattiesburg

Hattiesburg Clinic, P.A. is soliciting proposals under RFP HC-RTG-2026-IRE for a hosted, subscription-based Isolated Recovery Environment that keeps immutable, logically isolated copies of its Epic electronic health record restorable if ransomware or other attacks compromise production, backups, or identity systems. The listed proposal due date of November 1, 2026 has passed. No set-aside applies; the RFP states that small businesses, minority-owned businesses, women's business enterprises, and labor surplus area firms are encouraged to submit.

Required scope includes hosted infrastructure in a U.S.-based facility, immutable storage with configurable retention of at least 30 days, a dedicated identity and management plane separate from production systems, clean-room recovery and validation, implementation and initial testing, and 24/7/365 monitoring and support with testing at least twice per year. Bidders must execute the clinic's HIPAA Business Associate Agreement before accessing any clinic data and provide a current SOC 2 Type II report or equivalent independent assessment. The award carries 2 CFR Part 200 obligations, including suspension and debarment, Byrd Anti-Lobbying certification for awards exceeding $100,000, and prohibitions on certain telecommunications equipment. A notarized non-collusion affidavit with the bidder's SAM.gov UEI is required.

The contract term is twelve months from service acceptance, with two optional twelve-month renewals at the clinic's discretion, subject to funding availability. The RFP does not state a contract value. The procurement is funded in whole or in part through the Mississippi Rural Health Transformation Program, and the listing identifies Greene County, Mississippi as the jurisdiction. Pricing must be submitted on the clinic's Pricing Form (Attachment B) and covers one-time implementation, Year 1 recurring costs, optional Year 2 and Year 3 pricing, per-TB monthly rates, hourly professional services, and additional recovery testing. Bidders must state RPO and RTO commitments and a renewal-year escalation cap, and prices must remain firm through the stated validity period. Costs not listed on the form will not be paid, and Mississippi sales tax is excluded unless otherwise noted.

Evaluation weights are technical solution compliance at 40%, cost at 30%, vendor experience and references at 20%, and implementation approach and timeline at 10%. Failure to meet a mandatory requirement is a disqualification risk. Proposals are submitted by email to Jerry Robinson, Director of Information Systems.