ORAU security and information technology

ORAU follows a risk-based approach to information security. This currently includes implementation of the framework described in National Institute of Standards and Technology (NIST) Special Publication 800-53 and implementation of appropriate Information Technology Infrastructure Library (ITIL) service management practices. As standards and technologies evolve, ORAU continuously improves its compliance to meet client expectations.

ORAU provides appropriate physical and cyber security, adequate data back-up and recovery, appropriate equipment redundancy, and appropriate monitoring and contingency plans. ORAU holds and maintains an Authority to Operate under the U.S. Department of Energy (DOE) standards.