EHR Isolated Recovery Environment (IRE) Service

Hattiesburg Clinic, a multi‑specialty physician practice in Mississippi, seeks a vendor to deliver a hosted, subscription‑based Isolated Recovery Environment (IRE) for its Epic electronic health record. The service must provide immutable, WORM‑type storage, a separate identity‑management plane, and a clean‑room environment for malware‑free recovery after a cyber‑event. The contract is initially twelve months with two optional one‑year renewals; the vendor must support 24x7 monitoring, bi‑annual testing, and comply with HIPAA, SOC 2, and federal grant requirements. • Host a U.S.–based, logically isolated recovery environment for the Clinic’s EHR. • Provide immutable storage with at least 30 days of recovery points and AES‑256 encryption. • Separate identity management with MFA and multi‑person authorization. • Enable clean‑room scanning and validation of restored systems before production return. • Deliver implementation, initial data seeding, full recovery test, documentation, and training. • Offer 24 × 7 × 365 monitoring, twice‑yearly recovery testing, and defined SLAs. • Must sign HIPAA BAA, furnish SOC 2 Type II (or equivalent) report, and meet federal grant compliance.