The Department shall maintain ImmuNet in accordance with system security requirements for federal information processing systems, including National Institute of Standards and Technology (NIST) 800-53 Special Publication, and prevailing agency information technology security policy standards and requirements. ImmuNet Security. The Department shall: Maintain ImmuNet information on a server protected by a firewall; and Encrypt information traveling to and from authorized users. The Department shall maintain encryption keys in a secure location.