1. A. The Department shall maintain ImmuNet in accordance with system security requirements for federal information processing systems, including National Institute of Standards and Technology (NIST) 800-53 Special Publication, and prevailing agency information technology security policy standards and requirements.

2. B. ImmuNet Security.

   1. (1) The Department shall:

      1. (a) Maintain ImmuNet information on a server protected by a firewall; and
      2. (b) Encrypt information traveling to and from authorized users.
   2. (2) The Department shall maintain encryption keys in a secure location.

Authority: Health-General Article, §18-109; Health Occupations Article, §12-508; Annotated Code of Maryland

Effective date: April 27, 2015 (42:8 Md. R. 607)