Skip to content

Citadel environment

Citadel is the CHPC's environment for regulated research. Currently, Citadel is configured to support research with NIST SP 800-171 rev. 2 security controls, including work with controlled-access data from the NIH. 

Please note that researchers with projects involving protected health information (PHI)—without other types of sensitive information, such as controlled-access data—should use the Protected Environment.

On this page

The table of contents requires JavaScript to load.

What are NIST SP 800-171 and Citadel?

NIST SP 800-171, "Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations," is a Special Publication of the National Institute of Standards and Technology. It provides a framework for protecting Controlled Unclassified Information (CUI) and specifies numerous security controls that systems and organizations must implement to work with CUI.

The Citadel environment is compliant with rev. 2 of NIST SP 800-171, and it is designed to support University of Utah researchers who must work in compliant environments. If you have a project that requires an SP 800-171-compliant environment, please contact us.

Users of Citadel share in the responsibility to protect sensitive information. All Citadel users are responsible for completing periodic training in a timely manner, and they are subject to periodic background checks. Users are responsible for reporting security concerns and security incidents.

Incident reporting

If you have any questions or concerns about using the Citadel Enclave, or if you need to report an incident or concern, please contact the CHPC at helpdesk@chpc.utah.edu. Please do not include sensitive information in your message.

Last Updated: 10/29/25